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Abstract 

We introduce Ak , an extension of the action description language A ( |Gelfond fc Lifschitz, 1993^ 
to handle actions which affect knowledge. We use sensing actions to increase an agent's 
knowledge of the world and non-deterministic actions to remove knowledge. We include 
complex plans involving conditionals and loops in our query language for hypothetical 
reasoning. We also present a translation of Ak domain descriptions into epistemic logic 
programs. 



1 Introduction 

Since its introduction, the action description language A has served as a platform 
to study several aspects that arise when we try to formalize theories of actions 
in logic ( |Gelfond fc Lifschitz, 1993| ). A was designed as a minimal core of a high 
level language to represent and reason about actions and their effects. Domain 
descriptions written in this language have direct translations into extended logic 
programs. Extensions to A have been developed to study and reason about the con- 
current execution of actions ( |Baral fc Gelfond, 1997| ), the non-deterministic effects 
of some actions ( |Thielscher, 1994] ) and to study many instances of the qualification 
and ramification problems jKartha fc Lifschitz, 19941 ), jKartha fc Lifschitz, 1997| ), 
HMcCain fc Turner., 19971 ). 
In this paper we propose a new action description language called Ak- Ak is a 
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minimal extension of A to handle sensing actions. A sensing action is an action that 
does not have any effect in the world. The effect is only in the perception of the 
reasoning agent about the world. The execution of a sensing action will increase 
the agent's knowledge about the current state of the world. Take for example a 
deactivated agent placed inside a room. The agent has duties to carry out and will 
be activated by a timer. Let us assume the agent is always placed facing the door. 
The agent, once activated, may become damaged if it attempts to leave the room 
and the door is closed. Before the agent tries to leave the room it needs to perform 
some act of sensing in order to determine whether the door is opened or not. The 
agent has incomplete knowledge with respect to the door. A sensing action such as 
looking at the door would provide information to the agent concerning the status 
of the door. 

In our simple model there will be two sources of knowledge available to an agent: 
initial knowledge, i.e., knowledge provided to the agent at initialization time, and 
knowledge gained from sensing actions. We will assume that the agent is acting 
in isolation. Thus, once an agent has gained knowledge about its world, only its 
actions or limitations of its reasoning mechanism (such as limited memory) could 
make the agent lose knowledge. We will assume an ideal agent and expect that only 
actions can remove knowledge. An action can cause the loss of knowledge if its effect 
is non-deterministic. Take for example the action of tossing a coin. We know it will 
land with cither heads showing or with tails showing, but exactly which cannot be 
predicted. Non-deterministic actions and sensing actions have opposite effects on 
an agent's knowledge. 

The main contributions of this paper are: 



• The language Ak, which incorporates sensing and non-deterministic actions. 

• A query sub-language with complex plans that allow hypothetical reason- 
ing in the presence of incomplete information. These complex plans include 
conditionals (if-then-else) and routines (while-do). 

• A sound and complete translation of domain descriptions written in Ak into 
epistemic logic programs. 



The rest of this paper is organized as follows. In Section |21 we start with the 
syntax and semantics of domains with deterministic and sensing actions only. Sec- 
tion |3 presents the query sub-language of Ak with conditional plans. In Section^ 
the language is extended to include non-deterministic actions and Section adds 
loops to the query language. Sectional gives an outline of epistemic logic programs 
as they pertain to Ak ■ In Section[3 we present the translation of domains in Ak into 
epistemic logic programs. In Section |H1 we discuss how our work relates to other 
work in the field. Section IHl presents a few directions for future work and concluding 
remarks. 
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2 Ak- Domain Language 



2. 1 Syntax of Ak 



The language of Ak consists of two non-empty disjoint sets of symbols F, A. They 
are called fluents, and actions. As in A, fluents are statements or observations about 
the world. The set A consists of two disjoint sets of actions, sensing actions and 
non-sensing actions. Actions will be generically denoted by a, possibly indexed. A 
fluent literal is a fluent or a fluent preceded by a sign. A fluent literal is negative 
when preceded by -> and is positive otherwise. Fluent literals will be denoted by /, 
p and q possibly indexed. 

There are three kinds of propositions in Ak, object effect propositions, value 
propositions and non- deterministic effect propositions. We discuss non-deterministic 
effect propositions in Section 0] 

Object effect propositions are expressions of the form 

a causes / if pi, . . . ,p„ (1) 

where a is a non-sensing action, and / and pi, . . . with n < 0, are fluent literals. 
This expression intuitively means that in a situation where pi, . . . ,p„ are true, the 
execution of a causes / to become true. 

When n = in the preconditions of ^ we will write the proposition as 

a causes / (2) 

A value proposition is an expression of the form 



where / denotes a fluent literal. Value propositions describe the initial knowledge 
the agent has about the world. 

There are also knowledge laws. Knowledge laws are expressions of the form 



where is a sensing action, / is a fluent and pi , . . . , p„ are preconditions as in 
Intuitively this expression says that in a situation where pi, . . . ,p„ are true the 
execution of causes the agent to realize the current value of / in the world. We 
do not allow sensing actions to occur in any effect proposition. 
If n = in 0) , we will write the knowledge law as 

Qs causes to know / (5) 

At this point we should remark that we are assuming the agent may have in- 
complete but always correct knowledge about the world. Propositions and laws in 
Ak describe how the knowledge of the agent changes, but if these changes are the 
result of propositions like |^ we assume that the effects in the world would be the 
same as if the world were in a state where pi, . . . ,p„ are true, that is, there are not 
external entities that modify the world and the specification of the laws are correct 
and deterministic. 



initially / 



(3) 



Us causes to know / if pi, . . . 



(4) 



Definition 2.1 
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A collection of the above propositions and laws is called a domain description. A 
domain description D is simple if for any sensing action and any fluent / there 
exists at most one knowledge law in D of type Q . 

The following example illustrates how knowledge laws can be used to reason about 
actions. 

Example 2.2 

A robot is instructed to replace the bulb of a halogen lamp. If the lamp is on when 
the bulb is screwed in, the robot's circuits will get burned out from the heat of the 
halogen bulb, and it will not be able to complete the task. The robot will have to 
find a sequence of actions that will allow it to complete the task without burning 
out. We assume that the robot is already at the lamp. This is represented by the 
following domain description, 

ri : initially -^burnOut 
r2 : initially -^bulbFixed 
^ ra : changeBulb causes burnOut if switchOn 
^ r4 : changeBulb causes bulbFixed if -iswitchOn 
rs : turnSwitch causes switchOn if -^switchOn 
rg : turnSwitch causes -iswitchOn if switchOn 

It follows from Di that in the initial state the robot does not know the state of the 
switch in the lamp. Hence, there does not exist a way to determine before hand 
what will be the result of the action changeBulb. When the robot goes to carry 
out the action changeBulb, it could end up in a resulting state in which cither 
bulbFixed is true or in a state where it will be burned out and unable to complete 
the task. Without knowing whether the switch is on or off, the robot will not be 
able to find a plan to accomplish its task. The robot must first check the state of the 
switch. After realizing whether the switch is on or off, it will take the appropriate 
actions to complete the task. The robot will need a knowledge law such as: 

r7 : checkSwitch causes to know switchOn if -iburnOut 
After checking the switch the robot will know whether the switch is on or off. 
Sensing gives the robot that extra knowledge it would need to accomplish the task 
without burning out and provides a branching point in its hypothetical reasoning. 
If the switch is on it will turn the switch and replace the bulb. If the switch is off 
it will directly replace the bulb. This conditional reasoning will enable the robot to 
show that there is a sequence of actions to accomplish the task. 

2.2 Semantics of Ak 

The semantics of Ak must describe how an agent's knowledge changes according to 
the effects of actions defined by a domain description. We begin by presenting the 
structure of an agent's knowledge. We will represent the knowledge of an agent by 
a set of possibly incomplete worlds in which the agent believes it can be. We call 
these worlds situations and a collection of worlds an epistemic state. A situation, 
since it could be an incomplete description of the world, will be represented by a 
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state 

situation 

epistemic state 



(a) Agent A (b) Agent B 

Fig. 1. Epistemic states for Agent A and Agent B. 

collection of sets of fluents. A set of fluents will be called a state. If a formula is 
true in an epistemic state of an agent (to be defined later), by our assumption it 
means that the agent knows that the formula is true in the real world. Epistemic 
states will also allow us to distinguish when the agent knows that the disjunction 
/i V /2 is true from when it either knows /i or knows /2.^ 

We will say that a fluent / is true or holds in a state a (denoted by cr |= /) iff 
/ G cr. A fluent / does not hold in a state a (denoted by cr ^ /) iff / ^ u. fi |= ->/ 
iff cr ^ /. For more complex formulas, their truth value can be recursively defined 
as usual. A formula ip made of fluents is true in (or modeled by) a situation S 
(denoted hy T, \= if) if the formula is true in every state in E; it is false if ^ip is true 
in every state E. A formula is true in an epistemic state if is true in every situation 
in the epistemic state; it is false if its negation is true. 

A situation is consistent if it is non-empty; otherwise it is inconsistent. A situation 
is complete if it contains a single state; otherwise it is incomplete. An epistemic 
state is inconsistent if it is empty or contains an inconsistent situation; otherwise 
it is consistent. An epistemic state is complete if it contains only one complete 
situation. Figure 1 shows two consistent epistemic states in which the fact "OlZie is 
wet" (represented by wet) is known by Agent A and Agent B. In the epistemic state 
(a), containing an incomplete situation. Agent A does not have knowledge about 
the weather. In the other epistemic state (b), containing two complete situations. 
Agent B either knows it is raining or knows that it is not raining outside. Recall 
that epistemic states will be used in the context of plans for hypothetical reasoning. 
That is, predicting properties if the plan were executed. Thus, if an agent plans to 
execute a series of actions that takes it to the epistemic state (a) , it will not know 
how to dress if it needs to go outside and does not want to get wet. In the epistemic 
state (b), the agent will know how to proceed. 

Interpretations for Ak are transition functions that map pairs of actions and 
situations into situations. To define when an interpretation models a domain de- 



^ Note the similarity with a collection of belief sets in JGelfond fc Przymusinska, 1991) . 
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scription, we will define an auxiliary function that interprets the effect of actions at 
the state level. We call this function a 0-interpretation. 0-interpretations are func- 
tions that map actions and states into states'^. A 0-interpretation $0 is a 0-model 
of a domain description D iff for every state a 

1. For a fluent / of any effect proposition of the form "a causes / if pi, . . . ,p„" 
in _D, the fluent / holds in $o(oj cr) if its preconditions pi, . . . ,p„ holds in a, 

2. For a fluent literal -1/ of any effect proposition of the form "a causes -1/ if 
Pi, ■ ■ . ,Pn^ in D, the fluent / does not hold in $0(0,0') if its preconditions 
pi, . . . ,Pn holds in a, 

3. For a fluent /, if there are no effect propositions of the above types, then 
/ e $o(a, ct) if and only if / G ct. 

Before we define when an interpretation $ is a model of a domain description Z?, we 
need the following definition that will let us interpret knowledge laws. The interest 
of the defintion will become clear after we explore the scenarion in Example 12.41 

Definition 2.3 

Let S be a consistent situation, / a fluent and Lp a disjunction of conjunctions of 
fluent literals (preconditions). A consistent situation S' is " f , ip- compatible^^ with 
E iff S' = E whenever / is either true or false in E. Otherwise E' must satisfy one 
of the following conditions: 

1. E' = {fT G E I (/J is not true in a} 

2. E' = {(7 G E I (y3 is true in cr, / ^ a} 

3. E' = {fT G E I </? is true in cr, / G cr} 

Example 2.4 

Let us return to the agent scenario from the introduction. Imagine that currently 
the agent is deactivated in the room. The agent will be automatically activated 
by an internal clock. Then it needs to find the door, leave the room, and perform 
some duties. When the agent is initially activated it will know nothing about its 
surroundings and will remain ignorant of its surroundings until it performs a sensing 
action. We will show how the conditions presented in Definition 12.31 are enough to 
represent the result of sensing. Its only action is to look. We assume the action 
consist of opening its "eyes" and looking. This domain is represented below with 
only one knowledge law, 

Z?2 { Ti '■ look causes to know doorOpened if facingDoor 

This initial situation of complete ignorance is represented by the situation 
{{}, {doorOpened}, {facingDoor}, {doorOpened, facingDoor}}. 

If the action look is executed in the real world the agent may find that it is not facing 

the door and will not know whether the door is opened or not, this is represented 

by the situation 

{ { }, {doorOpened} }. 

^ 0-interpretations and 0-models are similar to interpretations and models for domains in A.. 
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Another possibility could be that the agent was facing the door and after it is 
activated, it will know that it is facing the door and will also know that the door 
is not opened 

{ {facingDoor} }. 

Still another possibility could be that the agent was facing the door and after being 
activated, it will learn that it is facing the door and that the door is opened 

{ {doorOpened, facingDoor} }. 
Since the agent will be doing hypothetical reasoning (i.e. planning) it will have no 
way of knowing which situation it will be in until the action is actually executed. 
Thus, the agent can only assume that it will be in one of the three situations, 
so when the agent analyzes what would be the consequences of executing look it 
concludes that the result will take it to the epistemic state that consists of the 
following three situations. 

1- { { }; {doorOpened} } 

2. { {facingDoor} } 

3. { {doorOpened, facingDoor} } 

Each situation is doorOpened, facingDoor — compatible. The first situation corre- 
sponds to the first case of Definition 12. 31 The agent knows it is not facing the door 
since facingDoor is false in all states contained in the situation. The same cannot 
be said for doorOpened since in one state it is false and the other state it is true. 
This is to be expected since in this situation the agent is not facing the door, and 
it cannot know if the door is opened or closed. 

The second situation corresponds to the second case of Definition l2.3l This situation 
contains all the states in which the precondition facingDoor is true and the fluent 
door Open is false. The agent not only knows it is facing the door but also knows 
the door is not opened. 

The last situation is from the last case of Definition 12. 31 In this situation the agent 
knows it is facing the door and also knows that the door is opened. 

Observe that a result of sensing is that the preconditions of the sensing action 
will become known to the agent if the value of the fluent being sensed is initially 
unknown. This occurs even if the effect of the action remains unknown after exe- 
cuting the action, which hapens in the situation coming from the states where the 
preconditions of the execution of the sensing action in a knowledge laws are not 
true. 

Definition 2.5 

A state a is called an initial state of a domain description D iff for every value 
proposition of the form "initially in D, tp is true in a. The initial situation Eq 
of D is the set of all the initial states of D. 

Definition 2.6 

A fluent / is a potential sensing effect of a sensing action in a domain D if there 
is a knowledge law of the form 

Os causes to know / if <^ 
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in D. We will also say that / is the potential sensing effect of the knowledge law. 

The knowledge precondition of a fluent / with respect to a sensing action as in a 
domain D is the disjunction (pi V . . . V (y5„ if and only if 
as causes to know / if Lpi 

as causes to know / if iy9„ 
are all the knowledge laws in which occurs and / is a potential sensing effect. 

Note that if the domain is simple fDefinition l'i.f |l then the knowledge precondition 
of any fluent in the domain with respect to any sensing actions is either empty or 
it has only one disjoint. 

Definition 2.7 

Given an interpretation $ of Ak, $ is a model of a domain description D, if and 
only if for any consistent situation S: 

1. There exists a 0- model $o of £>, such that for any non-sensing action a, 
$(a,S) = U{$o(«,a)}. 

2. For each sensing action a^, let /i,...,/„ be the potential sensing effects 
of Os and </3i the knowledge precondition of fi with respect to a^. Then, 
$(as, S) must be consistent and if n = 0, $(0^, S) = E otherwise $(as, S) = 
riiGii n] such that each is a situation /i, (fi — compatible with S. 

$(a, S) = for any action a if S = 0. 
Example 2.8 

The third floor agent of a building has the job of making sure the white-board in a 
room on that floor is clean. The agent will approach the room, look into the room, 
clean the white-board if it is not clean, and then leave the room. We focus here on 
"looking into the room" . When the agent looks into the room it will know whether 
the white-board in that room is clean. Also if the curtains are open the agent will 
learn whether it is raining outside. Sensing actions can not appear in object effect 
propositions, but there is no restriction on the number of knowledge laws associated 
with a sensing action. Thus, the action could affect the truth value of several fluents 
simultaneously. In this example the sensing action looklnRoom will appear in two 
knowledge laws. We will see how the resulting situations are /, (/s-compatible with 
the initial situation and briefly discuss the models of this domain description. The 
following simple domain description illustrates the scenario, 

initially curtainOpen 
initially lightOn 

looklnRoom causes to know rainOutside if curtainOpen 
looklnRoom causes to know boardClean if lightOn 
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The initial situation Eq of has four states.^ 

Sq = { {curtainOpen,lightOn}, 

{rainOutside, curtainOpen, lightOn}, 
[boardClean, curtainOpen, lightOn}, 
{rainOutside, boardClean, curtainOpen, lightOn}} 

There is only one action in Dj,, and any model of D3 applied to the initial situation 
So may behave in one of the following forms: 

$i(Zoofc/ni?oom, Eo) {{curtainOpen, lightOn}} 
^2{lookInRoom,'So) = {{rainOutside, curtainOpen, lightOn}} 
^^{lookInRoom,YiQ) = {{boardClean, curtainOpen, lightOn}} 
^4{lookInRoom, Eq) = {{rainOutside, boardClean, curtainOpen, lightOn}} 

Models may differ in how they behave when they are applied to other situations 
different to Eg, but for Eg they must be equal to one of the $i above. Unlike 
domains in A in which given an initial situation there is only one model for the 
domain, our language allows for several models. 

Observe too that since looklnRoom is a sensing action, its occurrence does not 
change any fluent's value. If we start from Eg, and then reach one of the four 
situations, any new execution of looklnRoom will result in the same situation. 

To verify that each of the $j can be a partial description of a model of r^ and 
r4, let 

El = { {curtainOpen, lightOn}, {boardClean, curtainOpen, lightOn}} 
E2 = { {rainOutside, curtainOpen, lightOn}, 

{rainOutside, boardClean, curtainOpen, lightOn}} 
E3 = { {curtainOpen, lightOn}, {rainOutside, curtainOpen, lightOn}} 
E4 = { {boardClean, curtainOpen, lightOn}, 

{rainOutside, boardClean, curtainOpen, lightOn}} 

Note that Ei and E2 are rainOutside, curtainOpen-compatihle with Eg, and that 
E3 and E4 are boardClean, lightOn-compatihle with Eg, and 

^i(lookInRoom, Eg) = Ei H E3 
^2{lookInRoom, Eg) = E2 H E3 
^^(looklnRoom, Eg) = Ei H E4 
^(looklnRoom, Eg) = E2 H E4 

Note also that none of the situations are /, (^-compatible with Eg by part (1) of 
Definition 12.31 because there is no knowledge precondition Lp of either rainOutside 
or boardClean with respect to looklnRoom in the domain description that is 
false in any of the states in the initial situation Eg. 

Observe that the initial epistemic state of the robot has always a single situation. To be able to 
specify more complex initial epistemic states the language must be changed. 
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3 Ak- Query language part I 



Given a domain description, an agent would like to ask how the world would be 
after the exeeution of a sequence of actions starting from the initial situation. Using 
actions as in A, queries in Ak can be of the form 



where is a conjunction of fluent literals. The answer to this query will be yes (or 
true) in a domain D if for every model ^ of D the test condition (p is true in the 
situation 

$(a„, $(a„_i, . . . $(oi, So) ■ • •)) 

i.e. the situation that results after the execution of ai, . . . ,a„ from the initial sit- 
uation So of D. The answer will be no (or false) if for every model ^ of D (p is 
false in <I>(a„, $(a„_i, . . . $(01, So) ■ • •)). Otherwise the answer will be unknown. 
With this notion we can define an entailment relation between domain descriptions 
and queries. We say that a domain D entails a query Q, denoted by D ^ Q, if the 
answer for Q in D is yes. For example, if we add initially switchOn to Di , it can 
be easily shown that 

Di \= bulbFixed after [turnSwitch, changeBulb] 

However, from the original Di (even including ry) there does not exist a sequence 
of actions a such that Di \= bulbFixed. after a. The inferences from Di are con- 
ditioned to the output of the sensing action: if the switch is on then the sequence 
[turnSwitch, changeBulb] will cause the light to be fixed, else the single action 
[changeBulb] will fix it. Reasoning in the presence of sensing actions requires the 
projections to be over plans more complex than a simple sequence of actions. 
We recursively define a plan as follows,^ 

1. an empty sequence denoted by [] is a plan. 

2. If a is an action and a is a plan then the concatenation of a with a denoted 
by [a I a] is also a plan. 

3. If (/? is a conjunction of fluent literals and a, ai and 02 are plans then 
[ if (/?then ai\a] and [ if (pthen aielse a2\Q] are (conditional) plans. 

4. Nothing else is a plan. 

Now we redefine a query to be a sentence of the form 

ip after a (7) 
Where is a test condition (a conjunction of fluent literals) and a is a plan. 
Example 3.1 



after [ai , . . . , a„] 



(6) 



^ We will use the list notation of Prolog to denote sequences. 
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(Conditionals) Here we add the knowledge law to Di and rename it Di 



Dv { 



n : initially -^burnOut 

r2 ■ initially -^hulbFixed 

ra : changeBulb causes burnOut if switchOn 

r4 : changeBulb causes bulbFixed if -^switchOn 
r5 : turnSwitch causes switchOn if -iswitchOn 
re : turnSwitch causes -^switchOn if switchOn 
r-j : checkSwitch causes to know switchOn if -^burnOut 



We can define a conditional plan to fix the bulb: 
bulbFixed after 

then [changeBulb] 
else [turnSwitch, changeBulb]]. 



[checkSwitch, 
if ^switchOn 



The above query provides two alternatives for reasoning. The else clause is followed 
if the test condition is false. A conditional can be expanded to a case statement in 
general when reasoning needs to be done along several different sequences of plans. 
Note that if the conditional plan was attempted before or without the sensing action 
checkSwitch, the query may not succeed because the; tcist condition could evaluate 
to neither true nor false but rather unknown. Sensing actions need to be executed 
before the conditionals to ensure the test conditions will evaluate to either true or 
false. 



3.1 Plan Evaluation Function and Query Entailment 

To formally define entailment we need to define first the evaluation of a plan in 
terms of interpretations. In other words, we define how the plan will change an 
initial situation based on an interpretation. 

Definition 3.2 

The plan evaluation function r$ of an interpretation $ is a function such that for 

any situation E 

1. r*([],s) = s. 

2. r$([a|a],S) = r$(a,$(a, S)) for any action a. 

3. r$([if <y9thenai|a],E) = V^{a,T,'), where 

{r$(ai, S) if is true in S 
S if is false in S 

otherwise 

4. r$([ if tpthen aielse Q2|q], S) = r$(a, E'), where 

{r$(Q:i,S) if ip is true in S 

r$(a2, S) if (p is false in S 

otherwise 

Definition 3.3 
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A query (f after a is entailed by a domain description D {D \= (p after a) iff for 
every model $ of D, (/? is true in r$(a, E). 

It is easy to check that 

Di> j= bulbFixed after [check Switch^ 

if -^switchOn then [changeBulb] 

else [turnSwitch, changeBulb]]. 

It is easy to see the task will be completed regardless of what model we are in. This 
is due in part to the combination of the sensing action and the conditional plan. 



4 Actions with non-deterministic effects 

There arc several different reasons why knowledge may be removed from the set of 
facts known by the agent. There may be decay of the knowledge, difficulty accessing 
the knowledge, or it may execute an action that makes a particular knowledge no 
longer valid. In our description we assume an ideal agent; an agent whose knowl- 
edge persists and is not subject to any type of failure or obstacles preventing the 
quick access of its knowledge. Given this assumption, the first two possibilities for 
the removal of knowledge are impossible. However, non- deterministic actions may 
remove knowledge. A non-deterministic action is an action in which the outcome 
cannot be predicted beforehand. An example of such an action with an unpre- 
dictable outcome is the toss of a coin. A coin on a table will show either heads or 
tails. Looking at the coin, one can gain knowledge of which side of the coin shows. 
Once the action of tossing the coin takes place we are no longer certain of which 
side will show. The coin will land and will show either heads or tails. We will not 
know which side shows until we do the sensing action of looking. We describe the 
removal of knowledge as no longer knowing the truth value of a fluent. 
A non-deterministic effect proposition is an expression of the form 

a may affect /ifpi,...,p„ (8) 

where a is a non-sensing action and / is a fluent. The preconditions pi, . . . ,p„ are 
defined as in equation (1). Intuitively the proposition states that the truth value of 
/ may change if a is executed in a situation where pi , . . . , p„ is true. 
When n = 0, equation (10) becomes 

a may affect / (9) 

We now re-define 0-interpretations to take into account non-deterministic actions. 
A 0-interpretation $o is a 0-model of a domain description D iff for every state a, 
$o(a,c) is such that 

1. For a fluent / of any eff'ect proposition of the form "a causes / if pi, . . . 

in D, f S ^a{a, a) if pi, . . . ,p„ holds in cr, 

2. For a fluent literal of any effect proposition of the form "a causes -i/ if 
pi, . . . ,Pn" in D, the / ^ i>o(a, cr) if pi,...,Pn holds in a, 



Knowledge and the Action Description Language A 



13 



3. For a fluent / such that there are no eS'ect propositions of the above types, 
/ e $o(a)0-) if and only if / G (t unless there is a non-deterministic effect 
proposition of the form "o may affect / if pi, . . . for which pi,. . . ,Pn 
holds in a. 

Example 4-1 

Our agent is ordered at this time to put ice from a bag into cups. The ice in the 
bag is solid. The agent needs to break the ice into pieces that are able to fit in the 
cups. The agent decides to drop the bag of ice as a means to complete the task. 

tl : initially inHandlceBag 
t2 : initially solidlce 
t3 : initially noDrops 

tA : pickUp causes inHandlceBag if -^inHandlceBag 
tb : drop causes -linH andl ceBag if inHandlceBag 
t& : drop may affect solidlce if noDrops 
^1 tl : drop may affect solidlce if fewDrops 
t8 : drop causes fewDrops if noDrops 
t9 : drop causes enoughDrops if fewDrops 
tlO : drop causes -^solidlce if enoughDrops 
tU : checklce causes to know solidlce 
tl2 : putlcelnCups causes icelnCups if ^solidlce 

This example combines many of the ideas previously presented. Let us examine this 
domain description to see how this all fits together. 

• Rules tl - t3 establish what is initially known in the world. The values of all 
other fluents are unknown at this time. 

• Rules t4 and t5 describe the effect that theactions Drop and pickUp have on 
inHandlceBag. 

• Rules t6 and t7 describe the non-deterministic effect of the action drop on 
the ice. 

• Rules t8 - tlO are object effect propositions which ensure that the ice will 
break after no more than three drops (i.e. the execution of the action drop 
three times). In the example noDrops is equated with drops, fewDrops 
with 1 drop, and enoughDrops with 2 drops. 

• Rule til is the sensing action which allows the agent to know whether the 
ice is broken or not after the execution of the non-deterministic action drop. 
Rule tl2 is the goal of the task the agent is to perform. 

The non-determinism appears in the action of dropping the bag of ice. Before 
the action is carried out, the agent knows that the ice is solid. After the non- 
deterministic action, the agent is no longer certain if the ice is still solid or in 
pieces. The knowledge of knowing the ice is solid has been removed. The agent can 
only regain that knowledge by performing a sensing action. 

If the robot wants to fill the cup with ice it will iterate the process of dropping 
the ice until it breaks. A plan to accomplish this goal will look like: 

while -^solidlce do [drop, pickup, checklce] , putlcelnCups] 
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Adding loops to plans is the topic of the next section. 

5 Ak- Query language part II 

If we allow while-loops in our plan we could verify that entails the following 
query, 

icelnCups after [while -isolidlce do [drop, pickUp, checklce], putlcelnC'ups] 

Similar to conditional plans, a sensing action is placed before checking the exit 
condition of the loop. We extend the definition of plans to include loops as follows. 

1. An empty sequence denoted by [] is a plan. 

2. If a is an action and a is a plan then the concatenation of a with a denoted 
by [a I a] is also a plan. 

3. If 93 is a conjunction of fluent literals and a, ai and a2 are plans then 
[ if ip then ai\a] and [ if ip then aielse a2\a] are (conditional) plans. 

4. If is a conjunction of fluent literals and a and ai are plans then 
[ while (fi do ai\a] is also a (routine) plan. 

5. Nothing else is a plan. 

5.1 Plan Evaluation Function and Query Entailment 

To extend the definition of entailment to plans with while loops we need to extend 
the definition of the plan evaluation function r$. We will define this function us- 
ing very elementary tools from denotational semantics for programming languages 
(as in Chapter 4 of ( |Davey fc Priestley, 1990| )). The intuitive idea of the denota- 
tional semantics is to associate the execution of a plan (or a program) of the form 
" while (p do a" with one of the while-free plans:^ 
if ip then 

if ip then [a, if (p then 0] 

if ip then [a, if (p then [a, if (p then 0]] 

If the while-plan terminates then there exists a n such that the nth plan in this 
infinite sequence computes exactly the same function that the while-plan computes. 
Moreover, for each m < n, the mth plan is an approximation of the computation 
of the while-plan. If the while-plan does not terminate, any plan in the sequence 
is an approximation of the while-plan but none is equivalent since the while-plan 
computation is infinite. Thus, to define this sequence we start by defining a partial 
order over the set of functions that map situations into situations. The order will 
arrange the functions as in the sequence of plans above. 

Definition 5.1 



® Recall that the situation represents inconsistency. 
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Let £ be the set of all situations and V the set of all total functions / mapping 
situations into situations, V = {f \ f : £ ^ £ }. We say that for any pair of 
fimctions /i,/2 E P,fi < /2 if and only if for any S G 5 if /i(S) 7^ 0, then 

/l(I]) = /2(S). 

Then, we associate a (continuous) transformation inside this order to each plan a. 
Informally speaking, the transformation starts with the first plan in the sequence 
and in each application returns the next element in the sequence. Finally, we will 
define the meaning of the plan based on the least fix-points of these transformations. 
Let /0 denote the function that maps any situation into the empty situation 0. 

Definition 5.2 

Let a be a plan and F a function that maps plans and situations into situations. 
Let iphe a, conjunction of fluent literals. Then, we define the function JT^ ^ : V ^ V 
such that for any function f £ V, 

{S if is false in E 

/(r(a,E)) if ^ is true in S 
otherwise 

We can define the powers of ^ as follows: 

1- ^a,^ TO = /0. 

3- 1 ^ = ■■■ -^a,^ • ■ ■ {J'a,v(^^,vi^^,v TO))...)..., i.e. the infinite compo- 

sition of .F^^ applied to /0. 

It can be shown that this power is correctly defined. Proof and a formal definition 
of powers can be found in Appendix El 

We now extend the definition of the evaluation function F^ to apply to plans 
with routines by adding item 

5. F^([ while ^ do S) - F$(a, S'), where S' = .Fff^^hena^,^ 

to Definition 13.21 The definition of entailment remains unchanged. That is, D \= 
if after a iff for every model $ of I?, is true in F$(q!, Eq)- 

Example 5.3 

Z?5 \= icelnCups after [ while -^solidlce do [drop, pickup, checklce], 

putlcelnCups] 

5.2 Plan Termination 

Notice that the query above with the while loop could have been written using 
three nested conditionals. A more natural example will replace rules t6 — 10 with 
the single rule 

drop may affect solidlce 

However, in this domain we are not be able to prove termination. The verification 
of termination is a difficult task, especially for planning. How do we really know 
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that the ice will eventually break? Or how do we know that the cup is filling up? 
With time the ice will either melt or break, and if we do not place infinitcsimally 
small amounts of ice in the cup the cup will eventually fill up or we will run out 
of ice. We have simplified the problem in our example by adding tQ — tlQ. These 
propositions state that the ice will break with no more than three "drops" . 
We are faced with a similar situation in the following example. 

Example 5.4 

Consider the following situation. On the floor of a room there are cans. An agent is 
given an empty bag and instructed to fill the bag with cans. We assume that there 
are more than enough cans on the floor to fill the bag. The domain description for 
this task is 



D4 < 



r5 



initially -^hagFull 
drop causes -icanlnHand 
drop causes canlnBag if canlnHand 
looklnBag causes to know bagFull 
pickUp causes canlnHand if -^canlnHand 



This task of picking up cans and dropping them into the bag involves the repetition 
of a small sequence of actions. There is a degree of uncertainty inherent in this 
task because it is unknown how many cans are needed to fill the bag. Therefore a 
loop that executes the sequence of actions repeatedly until the task is completed is 
needed. If the number of cans needed to fill the bag is known beforehand, then the 
set of actions would be repeated sequentially for those number of times. 



A query that we would like to prove 



IS 



bagFull after [looklnBag^ while -^bagFull do [ pickUpCan, 

dropCanlnBag, 
looklnBag]] 

Ideally, we would like to use a routine which could solve any type of task that 
involves uncertainty of its end. However, each task has its own conditions for termi- 
nation. For example, filling the volume of a bag differs from finding an unfamiliar 
store in an unfamiliar area based on the vague directions of a stranger. Do we really 
know the bag will become full? Or how useful are vague directions such as, "Just 
walk down Lincoln Avenue, you can't miss it" when generating a plan. A hole may 
tear in the bag, or suppose that the stranger who had all the best intentions was 
mistaken about the location of the store. To ensure termination (either with success 
or failure) we need to add to our domain descriptions general axioms or constraints. 
We do not have constraints in Ak but we may be able to add them by using other 
extensions of A such as the one in ( |Baral et al., 1997| ). To address this problem 
we should first look at the standard techniques of problem verifications such as 
the ones founded in ( |Aho fc Ullman, 1995| ) or jCousot, 1990| ). These classical ideas 
have been used by Manna and Waldinger to prove termination of plans with loops 
but without sensing actions ( |Manna &: Waldinger, 1987| ). For sensing, it might also 
be useful to consider the techniques described in ( [Geffner fc Bonet, 1998| ) to detect 
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loop-termination using probability approaches. However, analysis of the termina- 
tion of plans is outside the scope of this paper. We will discuss in Section |21 how 
some of the problems of termination may be addressed in simple situations. 



In the past, domain descriptions of dialects of A have been translated into extended 
logic programs ( |Baral fc: Gelfond, 1997||Gelfond &: Lifschitz, 1993| ). Extended logic 
programs use two types of negation to represent incomplete information. There 
is strong or classical negation ^ and negation as failure not. The semantics of 
extended logic programs is defined by a collection of sets of literals called answer 
sets | |Gelfond fc Lifschitz, 19911 ). However, we are required to represent incomplete 
information that crosses over multiple sets of answer sets. This will be the case in 
our translation of domain descriptions into logic programs where situations will be 
closely related to sets of answer sets, and domain descriptions act over epistemic 
states which are sets of situations. In this case, extended logic programs will no 
longer be sufficient to codify domain descriptions. 

Gelfond has extended disjunctive logic programs to work with sets of sets of 
answer sets ( IGelfond fc Lifschitz, 19911 ). He calls his new programs epistemic logic 
programs. In epistemic logic programs, the language of extended logic programs is 
expanded with two modal operators K and M. KF is read as "F is known to be 
true" and MF is read as "F may be believed to be true." 

Universal and existential quantifiers are also allowed as well as the epistemic 
disjunctive "or" which the semantics is based on the minimal model semantics 
associated with disjunctive logic programs ( |Lobo et ai, 1992| ). As an example, when 
F or G is defined as a logic program, its models are exactly F and G. Note that the 
classical F\/ G cannot be defined as a logic program, because it has models which 
are not minimal. 

In the rest of this section we will review the syntax and the semantics of the 
subclass of epistemic logic programs that will be required to represent our domain 
descriptions. Readers interested in more details about epistemic logic programs are 
referred to ( [Gelfond, 1994| ). 

The semantics of an epistemic logic program is defined by pairs {A,W). A is a 
collection of sets of ground literals called the set of possible beliefs. Each set in A 
can be indexed as A = {Ai . . . A„}. W is a set in A called the working set of beliefs. 
To define the semantics, we restrict our formulas to be: ground literals, a ground 
literal preceded by a modal operator, a ground literal preceded by a modal operator 
and -I, or a conjunction of such formulas. The truth of a formula F in {A, W) is 
denoted by {A, W) |= F and the falsity by (A, W) =\F, and are defined as follows. 



6 Epistemic Logic Programs 



{A,W) 
{A,W) 
{A,W) 
{A,W) 



h 
h 
h 



F iff F G W, when F is a ground atom. 
KF iff {A, A,) h F, VA, G A. 
F AG iS {A,W) ^ F and {A, W) h G. 
-F iff {A,W) =1 F. 
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(A, W) =1 F iff e W, when F is a ground atom. 

{A, W) =1 KF iff {A, W) ^ KF 

{A, W) =1 A G iff {A, W) =\F or {A, W) =\G. 

{A, W) =1 -^F iff {A, W) 1= F. 

{A, W)\= For cm {A, W) |= ^(^F A ^G) 

Note that when a formula G is of the form KF , or -^KF, its evaluation in {A, W) 
does not depend on W. Tims, we will write A \= G or A = | G. Moreover, the 
evaluation of object formulas does not depends on A. If G is objective we sometimes 
write W\= G or W =1 G. 

An epistemic logic program is a collection of rules of the form 

Fior ...or Fk <- Gi, . . . , G^, not . . . , not F„ (10) 

where Fi . . .F/. and F^+i ■ ■ - Fn are (not necessarily ground) objective literals 
(without K or M) and Gi . . . Gm are (not necessarily ground) subjective (with 

K or M) or objective literals. 

Let n be an epistemic logic program without variables, not, or modal operators. A 
set W of ground literals is a belief set of 11 if it is a minimal set of ground literals, 
satisfying the following properties: 

1. W\=F for every rule F ^ Gi . . . G„ in H which W^Gl^...^Gm■ 

2. If there is a pair of complementary literals, i.e F and -iF, in W then W is 
the set of all literals. 

Let n be an epistemic logic program with not and variables but does not contain 

any modal operator. Let Groundijl) be the epistemic logic program that is obtained 
from n by replacing each rule in 11 with all its ground instances. Let W he & set of 
ground literals ( literals in W and 11 are from the same language). 11^ is obtained 
from n by removing from Ground{U) 

1. All the rules which contain formulas of the form not G such that W \= G. 

2. All occurrences of formulas of the form not G from the remaining rules. 

is a belief set of 11 if and only if is a belief set of 11^ . 

Let n be any epistemic logic program, and A a collection of sets of literals. [IIJa 
is the epistemic logic program obtained by removing from Ground(Jl) 

1. All rules with formulas of the form G such that G contains M or and 
A^G, 

2. All occurrences of formulas containing M or K from the remaining rules. 

A set A is a world view of 11 if A is the collection of all belief sets of [11] a- A world 

view of n is consistent if it does not contain the belief set of all literals. An epistemic 
logic program is consistent if it has at least one consistent non-empty world view. 
In epistemic logic programs the only working sets of beliefs that are considered are 
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world views and the possible belief is always a member of the working set under 
consideration (i.e. a belief set). 

Let n be an epistemic logic program and A be a world view of 11. A literal L is 
true in A iff for every ground instance F of L, (A, Ai) \= F for all Ai in A. F is 
true in 11, denoted by 11 ^ i^, iff A |= F for every world view A of 11. 

Example 6.1 

The epistemic program 

1. q{a) ^ -iKp{a). 

2. p{a) ^ -^Kq{a). 

has two world views 

{{p{a)}} {{q{a)}} 
In the first world view Kp{a) is true and Kq{a) is true in the second. 

The epistemic program 

1. q{a) or q{b). 

2. p{a) ^ ^Kq{a). 

has one world view 

{{p{a),q{a)},{p{a),q{b)}} 

Note that Kq{a) is not true in this world view because q{a) is not member of the 
second belief set. The main intuition to have when reading a formula of the form 
KF is that it will be true iff F is true in every belief set of the program. 

7 Translation to Epistemic Logic Programs 

In this section we start with a sound and complete translation of simple domain 
descriptions into epistemic logic programs. This will lot us explain the logic program 
rules under the simple scenario and will make clear the rules for the general case. 

Our epistemic logic programs will use variables of three sorts: situation variables 
denoted by S or S' possibly indexed, fluent variables denoted by F or F' possibly 
indexed, action variables denoted by A or A' possibly indexed, and the special situ- 
ation constant sq that represents the initial situation. We will also have a constant 
symbol for each fluent symbol / in the language and we add the constant symbol 
/ to represent -if . For simplicity wc will denote the fluent literal constants by the 
fluent literal they represent. We will also add the special constant symbol true to 
the set of fluent literal constants. 

7.1 The Domain Independent Translation 

We start by first giving the rules for inertia. These rules encode that a fluent remains 

unchanged if no actions that affect the fluent is executed. Whenever a fluent literal 
appears as an argument in a predicate, it is representing a corresponding constant 
in the program. For any fluent literal l,\il = ->/, Twill denote / in the program. 
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For every fluent literal / there is an inertia rule of the form: 

holdsif, res{A, S)) ^ holds{f, S),not ab{f, A, S). 
For every fluent symbol / there is an or-classicalization rule of the form 

holds{f, So) or holds{f, Sq) 

The above rule states that our belief sets are complete in the sense that either 
holds{f, So) or holds{f, sq) must be true since / V ->/ is a tautology in every state. 
Note that because of the minimal model semantics interpretation of the "or" we 
will not have both holds{f,so) or holds{f , sq) holding simultaneously. 

We will also have two more domain independent rules that we will call rules of 
suppression. 

holds{true, res{A, S)) ^ holds{true, S) 
holds{F, S) ^ holds{true, S) 

These rules will be used to implement compatibility. For example, if a situation 
S — {cti, (72} with two states is split into two situations Si = {ui} and E2 = W2}, 
for compatibility after the execution of a sensing action, Si will be generated by 
suppressing 172 from S using these rules. How this is accomplished will become 
apparent when we introduce the domain dependent rules produced by the knowledge 
laws. 

7.2 The Domain Dependent Translation 

Value propositions of the form "initially /" are translated into 
holds{f, So) 

The translation of effect propositions of the form "a causes / if pi, . . . ,p„" is the 
standard translation for effect propositions introduced by Gelfond and Lifschitz in 
HGelfond fc Lifschitz, 1993| ) for A. The translation produces two rules. The first one 
is: 

holds{f, res{a, S)) <— holds{pi, S), . . . , holds{pn, S) 

It allows us to prove that / will hold after the result of the execution of a if 
preconditions are satisfied. The second rule is: 

ab{f, a, S) <~ holds{pi, 5), . . . , holds{pm S), not holds{true, res{a, S)) 

where the predicate a6(/, a, S) disables the inertia rule in the cases where / can be 
affected by a. 

We will introduce the domain dependent translation of knowledge laws using the 
following domain description. 

Example 1.1 
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ri : initially -^bulbFixed 

r2 : checkSwitch causes to know switchOn if -^burnOut 



In this example the initial situation is: 



S = 



{{burnOut, -^bulbFixed, switchOn}, 
{burnOut, -^bulbFixed, -iswitchOn} , 
{-iburnOut, -^bulbFixed, switchOn} , 



{-iburnOut, -^bulbFixed, -^switchOn}} 



after the robot executes the action checkSwitch we will have the following resulting 
situations: 



^i{checkSwitch,T,) = { {-iburnOut^-ibulbFixed, switchOn]} 
^2{checkSwitch,T,) = { {-'burnOut,-'bulbFixed,-'SwitchOn}} 
^3{checkSwitch,T,) = { {burnOut, -ibulbFixed, switchOn}, 



These correspond to the three {switchOn, -i6itrnOMt)-compatible sub-sets of S (see 
Definition 12.31) . Note also that 



'^i{checkSwitch,<^i{checkSwitch,Yi)) = <^i{checkSwitch,Y,) 
^2{checkSwitch,^2{checkSwitch,Y,)) — ^2 {check S witch, T,) 
<^ ^{checks witch, ^2{checkS witch, T,)) — ^3 {check S witch, T,) 



Our logic program translation of this domain will have three world views, one 
corresponding to each of the transition functions $1 $2, and $3. $1 is depicted 
on the left hand side of the figure below, <I>2 on the right hand side and $3 in the 
middle. 



{burnOut, -ibulbFixed, -iswitchOn}} 
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burnOut -ibulbFixed 
switchOn 

-^burnOut -ibulbFixed 

stri l.chOii. 
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burnOut -ibulbFixed 






-iswitchOn 


) 




r 








-iburnOut -ibulbFixed 






-iSwitchOn 


) 



heckSwitch 




-iburnOut -ibulbFixed 
switchOn 



$3 



checkSwitch 



checks witch 



checkSwitch 











^burnOut -ibulbFixed 






-iSwitchOn 





checkSwitch 




burnOut -ibulbFixed 
switchOn 



burnOut -ibulbFixed 
-iSwitchOn 




checkSwitch 

The world view associated with $i on the left hand side of the figure will have four 
belief sets. One will contain the union of the two sets 



Wj = {holds{burnOut, sq), holds{bulbFixed, sq), holds{switchOn, sq)} 



and 



^res(cs so) ~ ^ holds{burnOut, res{checkSwitch, sq)), 
holds{bulbFixed, res{checkSwitch, sq), 
holds{switchOn, res{checkSwitch, sq))} 



This union represents the fact that {^burnOut, -ibulbFixed, switchOn} is an initial 
state (encoded W}^) and that the same set is also a state in ^i{checkS witch, T,) 
(encoded in , ■,). The rest of the literals in are the same as in , s 
except that the situation constant in each literal is replaced by situation constants of 
the form res{checkS witch, res{. . . , res{check Switch, sq) • • •)) representing that the 
state remains the same after any number of applications of the action checkSwitch 
to the state (the loop arc on the left of the figure). 



The second belief set will contain 

W'^^ = {holds{burnOut,so), holds{bulbFixed, so) , holds{switchOn, sq)} 
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representing that {-^burnOut, -^bulbFixed, ^switchOn} is also an initial state. How- 
ever, this state is not part of ^i{checkS'witch, E). Then, we need to suppress this 
state from the world view. We will do that by adding the set 

^res(cs so) ~^ holds{burnOut,res{checkSwitch, sq)), 
holds{bulbFixed, res{checkSwitch, sq), 
holds{switchOn, res{checkSwitch, so)) 

} u 

{ holds{burnOut, res{checkSwitch, sq))) 

holds{bulbFixed, res{checkSwitch, sq), 
holds{switchOn, res{checkSwitch, Sq)), 
holds{true, res{checkSwitch, sq)} 

to the belief set. Actually, we will have in the domain dependent translation a rule 
that adds holds{true,res{checkSwithc,so)), and the second domain independent 
suppression rule will add the rest. The rest of the literals in are the same as 
in W^gg^^j, ^^^-j except that the situation constant is replaced by situation constants 
of the form res{checkSwitch, res{. . . , res{checkSwitch, sq) . . .)) representing that 
the state remains suppressed in the result of applying the action checkSwitch to 
the state. This is the effect of the first domain independent suppression rule. 
The other two belief sets and are similar to W^. 

W^^ = {holds{burnOut, Sq), holds{bulbFixed, sq), holds{s'witchOn, sq)} 
W^jj = {holds{burnOut,so), holds{bulbFixed,so), holds{switchOn,so)} 

The rest of and is exactly as in W'^ since the states they represent are also 
suppressed from the result. 

Note that both holds{f, res{checkSwitch, sq)) and holds{f, res{checkSwitch, sq)) 
are members of the belief sets W^^, and W^, for any fluent /. Therefore, for any 
fluent literal g, the proof of holds(g,res{checkSwitch, sq) in the world view is not 
affected by these belief sets. The consequence is that we are ignoring three states 
after the execution of checkSwitch under the model $i. 

There are two more world views that correspond to the transitions in the middle 
and on the right hand side of the figure. The definition is very similar to the first 
world view. There are four belief sets in the middle, two of them suppressing initial 
states, and four belief sets in the last world view, three of them suppressing initial 
states. 

Thus, the domain dependent translation of will be; 

holds{bulbFixed, sq) <— 

Rule xi is the translation of rule ri. The rest of the rules correspond to the different 
suppression cases since states that are not suppressed by the transition will be 
moved to the next situation by the domain independent rule of inertia. Take for 
example, $i. 

^\{checkSwitch,T,) = {a € T,\a \= -^burnOut, switchOn G a} 
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Hence, we would like to suppress two kinds of states. 1) States where ^switchOn 
is true, and 2) States where burnOut is true. The rule for the first case is: 

holds{true, res{checkSwitch, S)) <— Kholds{switchOn, res(checkSwitch, S)) 

Kholds{burnOut, res{checkSwitch, S)), 
holds{switchOn, S) (11) 

The first two literals in the body of the rule verify that wc arc in the case 
of $1, that is, both switchOn and ^burnOut are true in every state of the re- 
sulting situation (i.e. the two literals Kholds{switchOn,res{checkSwitch,S)) and 
Kholds{burnOut,res{checkSwitch,S)) are true). The last predicate checks that 
we are suppressing the state where -^switchOn is true in the current situation (i.e. 
holds{switchOn, S)). 

The rule for the second case is very similar. Wc only need to change the; last 
literal to indicate that we are suppressing the state where burnOut is true (i.e. 
holds{burnOut, S)): 

holds{true, res{checkSwitch, S)) <— Kholds{switchOn, res{checkSwitch, S)) 

Kholds{burnOut, res{checkSwitch, S)), 
holds{burnOut, S) (12) 

Let us look now at $2- 

^2{checkS'witch, S) = {cr € S|cr |= -iburnOut, switchOn ^ a} 

We also suppress two kinds of states. 1) States where switchOn is true, and 2) States 
where burnOut is true. Wc need to check that ^swi tchOn and ^burnOut are true in 
every state of the resulting situation (i.e. Kholds{switchOn, res{checkSwitch, S)) 
and Kholds{burnOut, res{checkSwitch, S)) are true) to verify that we are in the 
case of ^2- The rules for the cases arc: 

holds{true, res{checkSwitch, S)) <— Kholds{switchOn, res{checkSwitch, S)) 

Kholds{burnOut, res{checkSwitch, S)), 
holds{switchOn, S) 

holds{true, res{checkSwitch, S)) <— Kholds{switchOn, res{checkSwitch, S)) 

Kholds{burnOut, res{checkSwitch, S)), 
holds{burnOut, S) (13) 



For $3 all the states where -^burnOut holds (i.e. holds{burnOut, S)) should be 
suppressed since 

^s{checkSwitch, E) = {cr € S|cr ^ ^burnOut} 

To verify that wc arc in the case of $3 we need t o check th ere is at least one state 
in the result where burnOut holds (i.e. ^Kholds{burnOut,res{checkSwithc,S))). 
The rule for this case is: 

holds{true, res{checkSwitch, S)) ^ -iKholds{hurnOut, res{checkSwitch, S)) 

holds{burnOut, S) (14) 
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There is a condition that must be added to all the rules. The condition is that if the 
fluent switchOn is already known in the original situation (for example if we have 
initially ^switchOn) then none of the states is suppressed from the situations. In 
other words, the rules above applied only if switchOn is unknown. To check that this 
is the case we must add to the body of each rule the literals ^Kholds{switchOn, S) 
and ^Kholds{switchOn,S). These literals are not required in this particular ex- 
ample but it must be part of the general case. 

In general, knowledge laws of the form "a causes to know / if pi, . . . , p„" are 
translated into the rules 



holds{true, res{a, S)) 



-:Kholds{f, S), -^Kholdsif, S), 
-^Kholds{pi,res{a, S)), 
holds{pi ,S),..., holds{pn, S) 



holds{true, res{a, S)) 



holds{true, res{a, S)) 



holds{true, res{a, S)) 



^Kholdsif, S), -nKholdsif, S), 
-'Kholds{pn, res{a, S)), 

holds{pi, S), . . . ,holds(pn, S) (15) 
-nKholdsif, S), -nKholdsif, S),Kholds{f, res{a, S)), 
Kholds{pi,res{a, S)), . . . , Kholds{pn,res{a, S)), 
holdsif, S) (16) 
-nKholds{f, S), -^Kholds{f, S),Kholds{f, res{a, S)), 
Kholds{pi, res{a, S)), . . . , Kholds{pn, res{a, S)), 
holds{pi, S) 



holds{true, res{a, S)) 



holds{true, res{a, S)) 



holds{true, res{a, S)) 



^Kholdsif, S), -^Kholdsif, S), Kholds{f, res{a, S)), 
Kholds{pi , res{a, S)), . . . , Kholds{pn, res{a, S)), 
holds{pn,S) (17) 
-^Kholdsif, S), -nKholdsif, S),Kholds{f, res{a, S)), 
Kholds(pi,res{a, S)), . . . , Kholds{pn, res{a, S)), 
holds(f, S) (18) 
^Kholdsif, S),^Kholds{f, S), Kholds{f, res{a, S)), 
Kholds{pi, res{a, S)), . . . , Kholds{pn, res{a, S)), 
holds{pi, S) 



holds{true, res{a, S)) <— -'Kholds{f, S), -^Kholds{f, S), Kholds{f, res{a, S)), 

Kholds{p\,res{a, S)), . . . , Kholds{pn,res{a, S)), 
holds{pn, S) (19) 

We have added to every rule the condition -^Kholds{f,S),^Kholds{f,S). None 
of those rulers apply if / is currently known. In this case, by inertia everything stays 
the same after the execution of the sensing action a. Assume now that neither / 
nor / holds in the "situation" S. Thus, according to the deflnition of compatibility 
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fPef. 12. 3|) . we would have three types of world views. 1) One type for which we can 
find a pi for each of the belief sets such holds{pi,res{a, S)) does not hold; 2) World 
views in which Kholds{f, res{a, S)) and every Kholds(jii, res{a, S)) hold; 3) World 
views in which Kholds{f ,resla, S)) and every Kholds{pi,res{a, S)) hold. 

Intuitively, to capture these three cases the logic programming rules will suppress 
the belief set that breaks the rules. To suppress a belief set in the situation res{a, S) 
the rules will add holds{true,res{a, S)) to the belief set, and this atom together 
with the second suppression rule will add holds{l, res{a, S)), for every fluent literal 
I. Recall that the effect of having every literal hold for a particular situation in a 
belief set is that the belief set can be ignored when checking if the literal holds 
in the world view. Case (1) is captured by the first set of rules H15|l . Case (2) is 
captured by rule (fT?)|l and the set of rules ifTTji . Case (3) is captured by rule fH^ 
and the set of rules ifT^ . 

A non-deterministic effect proposition of the form "a may affect / if pi, . . . ,p„" 
is translated into 

holds{f ,res{a, S)) ^ not holds{f ,res{a, S)), 

holds{pi, S), . . . , holds{pn, S) 
holds{f ,res{a, S)) ^ not holds{f ,res{a, S)), 

holds{pi, S), . . . , holds{pn, S) 

ab{f, a, S) ^ not holds{f, res{a, S)), holds{pi, S), . . . , holds{pn, S), 

not holds{true, S) 
ab{f, a, S) ^ not holds{f, res{a, S)), holds{pi, S), . . . , holds{pn, S), 

not holds{true, S) 

To illustrate this translation, we use Rule tg from domain description D^, and 
show how it will work from the initial situation sq. We also include the translation 
for ts, holds(noDrops, sq) and holds{solidIce, so) along with the inertia rule to get 
the following program. Notice that the suppression rules do not apply here since 
we are not considering any knowledge laws. 

holds(solidIce,res(drop, Sq)) <— not holds{solidIce,res{drop, Sq)), 

holds(noDrops, Sq). 
holds{solidIce,res{drop, Sq)) ^ not holds{solidIce,res{drop, sq)), 

holds(noDrops, sq). 

ab{solidIce, drop, Sq) ^ not holds{solidIce,res{drop, sq)), 

holds{noDrops, Sg), not holds{true, Sq). 

ab{solidIce, drop, so) ^ not holds(solidIce, res{drop, so)), 

holdsinoDrops, So), not holdsitrue, sq). 

holds{noDrops,res{drop, Sq)) <— holds(noDrops, Sq). 
ab{noDrops, drop, Sq) <— holds{noDrops, sq). 



holds{noDrops, sq) 
holds{solidIce, sq) 
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holds{noDrops,res{drop, So)) ^ holds{noDrops, sq), 

not ab{n()Drops, drop, sq). 



holds{noDrops,res{drop, sq)) <— holds{noDrops, sq), 

not ab{noDrops, drop, Sq). 

holds{solidIce, res{drop, sq)) <— holds{solidIce, so), 

not ab{solidIce, drop, sq). 

holds{solidlce,res{drop,so)) <— holds{solidIce, sq), 

not ab{solidIce, drop, sq). 

The program only has objective formulas. Thus, its semantics is given by its world 
view which consists of belief sets (belief sets are the same as answer sets in extended 
logic programs). The world view W of the above program isW = {Bi, B2} 

Bi = { holds{solidlce,res{drop, sq)), ab{solidIce, drop, Sq), 



} 



holds{solidIce, sq), holds{noDrops, res{drop, So)), 
ab{noDrops, drop. So), holds{noDrops, so) 



B2 = { holds{solidIce,res(drop, Sq)), ab{solidIce, drop, sq), 
holds[solidIce, Sq), holds{noDrops, res(drop, sq)), 
ab{noDrops, drop, sq), holds{noDrops, sq) 

} 

Notice that the query holds{noDrops,res{drop, Sq)) evaluates to true for the 
above belief sets. If we were to ask the queries holds{solidlce,res{drop,so)) or 
holds{solidIce,res{drop, So)), we see neither would be able to produce an answer 
of yes or no. Both queries' answer is unknown. 

The recursion through negation provides the desired effect of two possible inter- 
pretations for the effect of a in / (note that the two first rules of the example have 
the form c <— not b and b <— not c and this program has two answer sets, one is 
{c} and the other is {b}). 

The translaMon of a domain D is defined as the union of the domain dependent 
and domain independent rules. 

7.3 General Domains 

The assumption that we made for simple domains was that for any sensing action 
as and fluent / there is at most one knowledge law of the form 

as causes to know / if pi, . . . ,p„ (20) 

Suppose now we have the following domain 

ri : looklnRoom causes to know boardClean if curtainOpen 
r2 ■ looklnRoom causes to know boardClean if lightOn 

and assume we start with the following situation 

E = {{boardClean, curtainOpen}, {boardClean, lightOn}, {boardClean}, {}} 

There is one model $1 that will result in the states where the fluent boar Clean 
is true and the knowledge precondition curtainOpenV lightOn of boardClean with 
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respect to looklnRoom is also true (this corresponds to the third case of compati- 
biUty). 

<^i{lookInRoom,T,) = {{boardClean,curtainOpen}, {boardClean,lightOn}} 

We will need a suppression rule similar to the rules in group l|19|l of the translation 
of simple domains. The rule will be something like 

holds{true, res{lookInRoom, S)) 

<— -iKholdslboardClean, S), -'Kholds{boardClean, S), 
Kholds{boardClean, res{lookInRoom, S)), 

K holds{curtainOpen V lightOn, Tes{lookInRoom, S))", 
holds{curtainOpen, S), holds{lightOn, S), 

The question is how to encode "Kholds{curtainOpen V lightOn, . . .)"? We will 
do it by adding two rules to the program 

holds{plZ"dclean^S) ^ holds{curtainOpen, S) 
holds{ptt%tan^ S) - holdsihghtOn, S) 

Now the disjunction can be replaced by ''Kholds{p'-^°^^J^°2^ , resilooklnRoom, S))'" . 
The symbol P^{^°ardciemi ^ constant symbol not appearing anywhere else in 
the program. We complete the program with the rule 

holdsipiZfjkHr^ S) - not holds{ptt'lhTan^ S) 

and the translation becomes 

holds{true, res{lookInRoom, S)) 

<— -'Kholds{boardClean, S), -^Kholds{boardClean, S), 
Kholds{boardClean, res{lookInRoom, S)), 
Khol dsjptt'JhTeZ . resjlooklnRoom, S)), 
holdsiptt'Jktr^S) 

In general, if D is a domain description (not necessarily simple) then, for any sensing 
action a and any fluent /, if V. . .Wipm with Lpi = p\/\. . . /\p\. , i = 1, . . . , m, is the 
knowledge precondition of / with respect to a in the domain D, we will have a new 
constant symbol in the language of the logic program. Then for the knowledge 
laws: 

o causes to know / if (^si 

a causes to know / if 

the domain dependent translation will have the rules: 

holds{p'^,S) ^ holds(j>\, S), . . . ,holds(p\^, S) 

holds{p'f,S) ^ holdsijp^ , S), . . . ,holds{jPk^^, S) 
holda(j)'j , S) 'r— not holda(p°^ , S) 
holds{true,res{a, S)) ^ -^Kholda{f , S),~>Kholds{f , S), 

->Kholds{pf,res{a, S)), 



(21) 
(22) 
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holds{p'},S) (23) 
holds{true, res{a, S)) ^ -^Kholds{f, S), -^Kholds{f , S), Kholds{f , res{a, S)), 

Kholds{p'},res{a, S)), holds{f, S) (24) 
holds{true, res{a, S)) <— -^Kholds{ f, S), -^Kholds{ f , S), Kholds{f , res{a, S)), 

Kholds{p'f ,res{a, S)), 

holds(p}, S) (25) 
holds{true, res{a, S)) <— -^Kholds{f, S), -^Kholds[f , S), Kholds{f, res{a, S)), 

Kholds{p'},res{a, S)), holds{f, S) (26) 
holds{true, res{a, S)) «— -^Kholds{f, S), -^Kholds{f , S), Kholds{f, res{a, S)), 

Kholds{p'f ,res{a, S)), 

holds{]^, S) (27) 

The set of rules (|15f) corresponds to rule H23|l . Rule Ijltill corresponds to rule (|24|l . 
The set of rules H17|l correspond to rule H25|) . Rule 1)18(1 corresponds to rule H26|l 
and rule H19|l corresponds to rule (|27|l . 



7.4 Query Translation 

To answer queries in the epistemic logic program we need to include rules to imple- 
ment the evaluation functions T. The query "/ after a" will be true in a consistent 
domain D if and only if holds_after_plan(f, a) is true in the epistemic logic pro- 
gram obtained from D plus the rules 



holds jifter 4>lan{F, P) 

find_situation{W, S, S) 

find_situation{[a\a], S, Si) 
< — 

find_situation{[ if (p then qi |a2], S, Si) 
find_situation{[ if (p then qi \a2], S, Si) 



find_situation{[ if if then ai else a'i|Q2], 

S,Si) 



find_situation{[ if ip then ai else a'i|a2], 

S,Si) 



find_situation{[ while ip do qi |a2] , 5*, 5i ) 



find_situation{P, so, S), holds{F, S) 

find_situation{a, res{a, S), Si) 

Kholds{Tp, S), find_situation{a2, S, Si) 

Kholds{p, S), find_situation{ai, S, S') 
find_situation{a2, S' , Si) 



Kholds[ip, S), find_situation{a'i, S, S') 
f ind_situation{a2 , S' , Si) 



Kholds{ip, S), find_situation{ai, S, S'), 
find_situation{a2, S' , Si) 

Kholds{ip, S), 
find_situation{a2, S, Si) 
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find _situation{\yf h.i\e if do ai|a2], 5", Si) 

^ Kholds{(f>, S), 

find_situation{ai, S, S'), 
find_situation{[whU.e if do Qi|a2], S' , Si) 

As you may note from the rules, holds-after_plan{F, P) works in two steps. First, 
it finds the situation s that results from applying P to the initial situation (using 
find-situation{P,SQ,S)) and then shows that F holds in that situation. Since the 
translation of the domain may have several world views the program needs to find 
a situation for each world view. The following example illustrates how the process 
works. 

Example 7.2 



ri 
re 



initially -^burnOut 

initially -^bulbFixed 
changeBulb causes burnOut if switchOn 
changeBulb causes bulbFixed if -iswitchOn 
turnSwitch causes switchOn if -iswitchOn 
turnSwitch causes -iswitchOn if switchOn 
checkSwitch causes to know switchOn if -^burnOut 



Assume we would like to show that 

D\ ^ bulbFixed after [ checkSwitch, 

if switchOnthen [turnSwitch], 
changeBulb] 

The states in the initial situation of this example are: 

E = { {-iburnOut, -ibulbFixed, switchOn}, 
{-iburnOut, -ibulbFixed, -iswitchOn}} 

It has two models $i and $2 that for the sensing action checkSwitch behave 
very much like in Example 17. II Then, the logic program translation of this domain 
has two world views. The world view W corresponding to <i>i has two belief sets 
and W^, such that W} U , ^ from Example 17. II is a subset of and 
W^^ U Wr^es(cs so) ^ subset of VF^. also contains the sets 

res(is,res(cs,so)) 



{holds{burnOut, res{turnSwitch, res{checkS witch, so)))i 
holds{bulbFixed, res{turnS witch, res{checkSwitch, so)), 
holds{switchOn, res{turnSwitch, res{checkSwitch, so)))} 

and 

res(c6,res(is,res(cs,so))) 

{holds{burnOut, res(changeBulb, res{turnS witch, res{checkSwitch, so))))) 
holds{bulbFixed, res{changeBulb, res(turnSwitch, res{checkSwitch, Sq)))), 
holds{switchOn, res{changeBulb, res{turnSwitch, res {check Switch, so))))} 
and the set 
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^res(ts (res(cs so))) ~ {holds{burnOut, res{turnSwitch, res{checkSwitch, sq))), 
holds{hulbFixed, res{turnSwitch, res{checkSwitch, sq))), 
holds{switchOn, res{turnSwitch, res{checkSwitch, so)))} 

u 

{holds{hurnOut, res(turnSwitch, res{checkSwitch, sq))), 
holds{bulbFixed, res{turnSwitch, res{checkSwitch, sq))), 
holds{switchOn, res{turnSwitch, res{checkSwitch, sq))), 
holds{true, res{turnSwitch, res{checkS'witch, Sq)))} 

There is also a similar set W^2^,(eb,,.es(ts,(r-es(cs,so))))' ^i^h the same elements of 
Kes{ts,{res{cs,,o)))' ^placing the situation argument with 

res{changeBulb, res{turnSwitch, {res{checkSwitch, Sq)))) 
This corresponds to the sequence 
S, 

<^i[check Switch^ S), 
^ilturnSwitch, ^i{checkSwitch, E)), 
^i{changeBulb, ^ilturnSwitch, ^i(checkSwitch, E))) 

Thus, in this world view the predicate 

find_situation{[ checkSwitch, 

if switchOn then [turnSwitch], 
changeBulb] , sq, S) 

will hold in W iff 5 = res{changeBulb,res{turnSwitch,res{checkSwitch, sq))). 
The second step will check if 

holds{bulbFixed, res{changeBulb, res{turnSwitch, res{checkS witch, sq))) 

is in W. The answer is yes since the atom belongs to both and . 

The world view associated with $2 is defined in a similar manner, but in this 
world view S — res{changeBulb,res{checkSwitch, sq))- 

Let Hd he the epistemic logic program corresponding to the translation of a 
domain description D, and denote by the union of Hd and the rules to interpret 
queries given above. Then we can show: 

Theorem 7.3 

Given a consistent domain description D and a plan f3. D F after (3 iff 11^ \= 
holds-afterjplan(F, (3). 

Proof: see appendix. 



8 Relation to Other Work 



In ( |Levesque, 1996| ) there is also a programming language based on the situa- 
tion calculus which uses sensing actions. This work is based on previous work 
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from ( |Scherl fc Levesque, 1993| ), in which knowledge is represented using two levels. 
There is a representation of the actual situation (called s) in which the agent is in, 
and there are situations accessible from s (called s') which the agent thinks it might 
be in. Something is known to the agent as being true (false) if it is true (false) in 
all situations s' which are accessible from the actual situation s and is unknown 
otherwise. In other words ( |Scherl fc Levesque, 1993| ) distinguishes between what is 
known by the agent and what is true in world. We only represent what is know by 
the agent, and assume that this knowledge might be incomplete but always correct. 
Something is known in our representation if its value is the same throughout the 
states in a situation and unknown otherwise. 

In ( [Levesque, 1996||Scherl fc Levesque, 1993| ) the authors use preconditions which 
are executability conditions for an action's execution. For example, a precondition 
to clean a white-board is one must be in front of the white-board. Our precondi- 
tions differ in that they are conditions on the effects. We can always execute an 
action but its effect varies according to its precondition in the effect propositions. 
Extending Ak to include executability conditions can be done as for extensions of 
A. The use of conditions on effects however allows us to represent a phenomenon of 
sensing in which the value of previously unknown preconditions are learned along 
with the fluent we are trying to gain knowledge about. This is shown in examples 
12.41 and 12.81 where the robot will know whether or not it is facing the door after 
executing the action look. 

In ( [Levesque, 1996| ) once knowledge is gained it is never lost. We, on the other 
hand, explore the use of non-deterministic actions as a mechanism to remove knowl- 
edge. Our use of non-deterministic actions is similar to ( [Thielscher, 1994] ) where the 
effect of a non-deterministic action is to make a fluent true or false, but exactly 
which is indeterminate. As might be expected, there are cases where the possible 
outcome is not intuitive. Take for example a deterministic action Shoot that causes 
Ollie to be dead. Any observation, which depends on OUie being alive, such as "01- 
lie is walking" can be made false using the same action Shoot. Shoot can be used 
as a restriction which causes Ollie not to walk. In the resulting situation, Ollie will 
not be alive and therefore will not be walking around. This is not the case when 
Shoot has the non-deterministic effect of making Ollie dead or leaving Ollie alive 
(suppose that the gun is not working well). With the same restriction, Ollie may 
be dead and not walking in one situation and alive and not walking in the other. 
Assuming one can walk as long as one is alive, then the later situation makes no 
sense. The same holds true without the restriction but this time Ollie will be dead 
and walking in one situation. If shoot also has a non-deterministic effect on walking, 
we are no better off. 

These cases are prevented with integrity constraints as in ( [Kartha fc Lifschitz, 1994| ). 
Our language could be extended to include constraints as in ( [Baral et al., 1997| ) but 
our interest in non-determinism is its effect on knowledge. We discuss the topic of 
integrity constraints in Sectional 

Most translations for dialects of A are to extended logic programs. Our trans- 
lation is to epistemic logic programs because of its ability to represent knowledge 
and incomplete information. To the best of our knowledge this is the first use of 
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epistemic logic programs in a translation from action languages. The closest work 
related to our results is presented in ( Baral fc Son, 1997| . In that paper A is also 
extended to handle sensing actions but the semantics is some what limited be- 
cause they work with a three value semantics and only approximate knowledge. 
Furthermore, in their language sensing actions have no conditional effects. These 
restrictions allow Baral and Son to write translations into extended logic programs. 
Showing whether is possible to find a translation into extended logic programs or 
first order logic of our domains is an open question. 



9 Future Work 

We already mentioned the need to clarify the complexity of adding sensing actions 
to domain descriptions. Our translation suggests that it might be computationally 
more complex to deal with conditional sensing actions than sensing with no condi- 
tions. Two other possible directions of research are: First, the ability of an agent to 
query itself about what it knows (i.e introspection). This is useful when the cost of 
executing a series of plans is expensive maybe in terms of time. Allowing an agent 
to query whether it knows that it knows something may be a cheaper alternative 
and cost effective. The use of a modal operator as shown below may be sufficient 
to accomplish this. 

if -iknows((/3) then [a] (28) 

where is a test condition (as defined in Sectional), a a plan, and knows(<y9) would 
be an introspective operator on the test condition. 

Take for example Agent A in Fig. 1 from Section[21 Agent A knows that OUie is 
wet (denoted by wet), but does not know if it is raining outside (denoted by rain). 
Agent A would have to find a window and then look out that window to see if it 
is raining outside. Suppose the program or control module for finding a window in 
a building is long and very costly as far as battery power. Agent A would have to 
find a window and then check for rain. Agent B would benefit from the conditional 
below 

if -iknows(<y9) then [findWindow, lookOutside] 

Without an introspective operator, both Agent A and Agent B would have to find 
a window and then look outside. Agent B can save on battery power if it has the 
ability to query itself on what it knows. 

Second, we could investigate expanding the initial epistemic state. At present, 
domains only may start from a situation with only one initial epistemic state. For 
more states or to represent multiple initial situations in a domain, the language to 
describe domains must be extended with modal operators. 

As mentioned earlier in this paper, integrity constraints could be added. In- 
tegrity constraints define dependency relationships between fluents. Taking the 
example from the previous section, walking depends on OUie being alive. This 
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ILifschitz, 1996| ) 



never ip iiip 



(29) 



where ip and -0 are conjunctions of fluent literals. It states that ip can not be true 
when -0 is true. Our example with OUie would look like this 

never walking if -lalive 

Conditions of effect are used throughout this paper. An example of a executability 
condition is the fact that one has to be at a light bulb to change the light bulb. 
Executability conditions found in ( |Levesque, 1996| ) could be implemented using the 
methods found in ( |Kartha fc Lifschitz, 1994| |Lifschitz, 1996| l . 

impossible Aii ip (30) 

where A is an action and ip is a conjunction of fluent literals. The execution of 
action A cannot take place as long as ip is true. 

Using (|3()|l we could express the constraint that in order to change the bulb, one 
has to be at the lamp as 

impossible changeBulb if -^atLamp 

This paper will conclude with three thoughts. One is relaxing the assumption 
that an agent has incomplete but always correct knowledge of its world. One could 
imagine the agent not only reasoning on information that it knows is true, but also 
reasoning on what it believes is true. At present we have not explored this topic. 
The other idea is given that Ak is a high level action description language that 
deals with incomplete information across multiple possible worlds, it stands to rea- 
son that Ak could be translated to formalisms, such as Levesque's ( |Levesque, 1996| 
[Scherl fc Levesque, 1993| ) or autoepistemic logic ) |Moore, 1985||Marek fc Truszczynski, 1991| ), 
which also hold this property. The third refers to the termination of routines; there 
are certain tasks for which routines can be limited by a sensing action that de- 
termines the "size" of the problem. Take for example the number of pages in a 
book or the number of doors on the second floor of an office building. The number 
of pages contained in a book will ensure the termination of a search for a word 
through that book. The same applies to the number of doors on the second floor 
with respect to a security routine which checks that all the doors on the second 
floor are locked. For this type of task, a counter is sufflcient. To include counters, we 
do not require constraints but variables in Ak ■ These loops correspond to for-loops 
in regular programming languages. Consider the situation described in l5.4l On the 
floor of a room there are cans. An agent is given an empty bag and instructed to flU 
the bag with cans. We assume that there are more than enough cans on the floor 
to fill the bag. We can model the space left in the bag by having initially true one 
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(and only one) of the following fluents. 

spaceLeft{0) 
spaceLe ft{s{0)) 

spaceLeft{s''{0)) 

The effect of drop can be now described by the effect proposition: 

ri : drop causes spaceLeft{x) if spaceLeft{s{x)) 

However, we need to restrict the world to only allow one spaceLeft fluent to be 
true at any moment. This can be described with a constraint of the form 

never spaceLeft{x) A spaceLeft{y) if x ^ y 

Note that the constraint encodes a ramiflcation of drop since not only the ex- 
ecution of the action drop makes spaceLeft{x) true, but also indirectly causes 
spaceLeft{s(x)) to become false. 

An orthogonal problem to the issue of constraints, is that we still need in our 
domain a value proposition that tells us how much space we initially have in the 
bag. Adding the initial value proposition is not a completely satisfactory solution 
since the plan 

while nospaceLeft{0) do [dropC anInBag] 

fills the bag irrespectively of the initial situation and (in normal circumstances) 
the plan will always terminate. Furthermore, in a realistic setting, plans need to 
consider limitation of resources. Plans may need to limit the amount of time devoted 
to any task or limit the amount of energy that can be used. These bounds can be 
applied to all tasks, but still a counter is required. Further research in termination, 
specially in a common-sense approach to proof of termination is necessary to deal 
with loops in plans. 
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A While-evaluation Function 



Definition A.l 

Let £ be the set of all situations and V the set of all total functions / mapping 
situations into situations, V — {f \ f : £ ^ £ }. We say that for any pair of 
functions /i,/2 G V,f\ < /2 if and only if for any S G f if ^ 0, then 

/l(E)=/2(I]). 

The next proposition follows from the above definition. 
Proposition A. 2 

The above relation < defines a partial order in V. 

Moreover, this partial order is a complete semi-lattice with the bottom element 
equal to the function that maps every situation to 0. We will denote the bottom 

element by /0. 

Definition A. 3 

Let a be a plan and T a function that maps plans and situations into situations. 
Let be a conjunction of fluent literals. Then, we define the function J-^a,ip '-V 
such that for any function / G "P, 



Our goal is to show that T^^^ is continuous. For this, we will need to show that 
for any directed set D C P, the least upper bound of D, denoted by |JD exists, 
and that .^a_^(|J^) = U{-^a,^('^) I d G .D}. A directed set is a set such that for 
any finite subset of it, the least upper bound of that set exists, and belongs to the 
directed set. The existence of |J follows from the following proposition. 

Proposition A. 4 

Let D he a, directed subset of V, and let d G .D. If = E 7^ 0, for a situation 
E, then for any d' € D either d'(S) = or rf'(S) = S'. 

It follows from this proposition that. 



the proof of the following theorem. 
Theorem A. 5 

For any plan a and any conjunction of fluent literals (p, the function J-'a,,p is con- 
tinuous with respect to the order <. 

Proof: Let U^l.^i^] denote the function Ui^l.^i^) \ de D}. To prove the theo- 
rem, it suffices to show that, for any directed set D CV, ^a,ip{\-\^) = U-^a,vj[-'^]- 
Let S be a situation. 

(a) If (p is false in S then for any f gV, = ^- Hence, 




r S if (/7 is false in S 

(/)(S)=i /(r(a,S)) if is true in S 




otherwise 




j^l^{\_\D){i:) = E = \Jj^l^[D]{j:). 
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(b) If LP is true in S, then J^^,^(U =[]D{T{a,Y,)). Let U^l,v\D]{'^) = S'. 
By Proposition El S' = iff Tl^^{d){T:) = 0, for any d £ £» since Tl^^{d){'i:) = 
d{T(a, E)) and D is directed. Therefore, ^^,^(U^)(S) must be 0. If S' ^ 0, then 
for every d & D such that ^ 0, it must be the case that !F^ ^^{d){T,) — S 
since = d{r{a, E)) and L» is directed. Then J^^,^(U = e'. 

(c) When (p is neither true nor false in E, the proof is similar to part (a) since 
Tl^ifm = ^ ioT a.ny f e P. 

We define the powers of ^a,ip follows: 

1- T = /0. 

3- ^a,^ T ^ = U{^a,v 1 n\n<uj}. 
From the continuity of J^^^ the corollary below follows. 
Corollary A. 6 

The least fix-point of T^^^ is -^a,^' 1 

B Proofs 

In this section we present the proof of Theorem 17.31 by givingn a detailed proof 
of the correctness of the translation for simple domains. The proof for the general 
case is a direct extension. In our proofs we will use the splitting lemma of extending 
logic programs ( |Lifschitz fc Turner, 1994] ). For completeness we will include some 
definitions and the statement of the lemma below. 

Consider a nonempty set of symbols called atoms. A literal is an atom possibly 
preceded by the classical negation symbol A rule is determined by three finite 
set of literals - the set of head literals , the set of positive subgoals and the set of 
negated subgoals. The rule with the head literals Li, . . . , Lq, the positive subgoals 
Li+i, . . . , Lm and the negated subgoals Lm+i, • . . , is written as 
Li or ... or Lg ^ Lq+i, . . . , Lm, not L^+i, . . . , L„ 

The three parts of a rule r are denoted by header), pos(r) and neg{r)\ lit(r) 
stands for head{r) Upos{r) U neg{r). 

Definition B.l 

(Splitting set) | |Lifschitz fc Turner, 1994| A splitting set for a logic program 11 is 
any set U of literals such that, for every rule r e 11, if head{r) r\U ^ % then 
lit{r) C L/. If [/ is a splitting set for 11, we also say that U splits 11. The set of rules 
r G n such that lit{r) C J7 is called the bottom of 11 relative to the splitting set U 
and is denoted by bjj (11) . The subprogram li — bu (11) is called the top of 11 relative 
to U. 

Definition B.2 

(Partial evaluation) | |Lifschitz fc Turner, 19941 ) The partial evaluation of a program 
n with splitting set U w.r.t. a set of literals X is the program 6^/(11, X) defined as 
follows. For each rule r e 11 such that: 
(pos(r) n t7) C X A {negir) D [/) D X = 
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put in e„(n,X) the rule r' which satisfies the foUowing property: 
head{r') — head{r),pos{r') — pos{r) — U,neg{r') — neg{r) — U. 

Definition B.3 

(Solution) ( |Lifschitz fc Turner, 1994] ) Let U he a, splitting set for a program 11. A 
solution to n w.r.t. J7 is a pair {X,Y) of sets of literals such that: 

• X is an answer set for for hu(I\); 

• y is an answer set for euij^ — 6c/(n), X); 

• X \JY is consistent. 

Lemma B.4 

(Splitting lemma) ( |Lifschitz fc Turner, 1994| ) Let U he a. splitting set for a program 
n. A set A of literals is a consistent answer set of H if and only ii A = X UY ior 
some solution {X,Y) to H w.r.t. U. 

From now on we will refer to the simple domain description 1201 as domain de- 
scription to simplify the statements. 

The proof of Theorem (Theorem: Given a consistent domain description D 
and a plan (3. D \^ F after f3 iff |== holdsjafterjplan{F, (3).) is organized as 
follows: 

1. First, we will prove that the epistemic logic program translation models cor- 
rectly the execution of a single non-sensing action. Intuitively this can be done 
by looking at all the predicates of the form holds{f, res{a, sq)), for any non- 
sensing action a. Furthermore we should be able to replace the initial constant 
So with any fixed situation constant s of the form res{ai, . . . , res(ak, so) • ■ ■)■ 
In the proof we will show that given any situation constant s, state cr, and 
0-model of the domain $0j we can find a sub-set of the program ground{IlD) 
in which assuming s to be the initial situation constant one of its belief sets 
corresponds to $o. We will also prove the other direction. That is, for any be- 
lief set of the mentioned sub-set of ground(n]j ) , there exists a corresponding 
function $0, 0-model of D. This covers the general case of a single non-sensing 
action applied to a situation since, by the definition of 1 2. 71 this reduces to the 
application of 0-interpretations to each of the states in the situation. 

2. The second part of the proof extends the first part to cover the execution of 
sensing actions. In this case the sub-set of ground{Il]j) includes rules with 
the modal operator K. We show that each world view of the sub-program 
corresponds to an interpretation $, model of D. We also show that for any 
model $ of _D there is an associated world view of the sub-program. 

3. The next step extends step 2 from the application of a single action to the 
application of any sequence of actions by induction. 

4. The final step extends the proof from sequence a of actions to complex plans. 
The proof shows by structural induction on the complexity of the plans that 
given a fixed world view any plan (that terminates) can be reduced to the 
execution of a sequence of actions. 
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Given a situation constant s, denote by the subprogram of Ground{Ilj:)) 

that is restricted to those rules in ground{UD), such that either the only situation 
constant appearing in the heads is of the form res (a, s) for an action symbol a, or 
is of the form ab{ f, a, s) for a fluent literal / and action symbol a. 

For any possible action a, we will denote by 11^^ ^ the subprogram of 11^^^ 
that is restricted to those rules in IId that only involve the action a in its predi- 
cates, besides other action symbols occurring in s. We call a domain description a 
universal domain if there are no value propositions in the domain. Given a univer- 
sal domain description D, and state a, we denote by -Do- the domain consisting of 
D U {initially / : / G ct} U {initially : f ^a}. 

Definition B.5 

For a domain description D, let cr be a state, s a situation constant, and $o a 
0-interpretation, We define the set of literals A(^i^^^„^s) as follows: 

For any action a and any fluent /, 

1. holds{f^s) e <^ / Go-, 

2. /ioW.s(/,s) G /^(T, 

3. holds{f^res{a,s)) ^ A(^<s>o,a,s) f^^o{a,a), 

4. /io/ds(/,res(a,s)) G A(a,g_o,s) /^$o(a,cT). 

5. ab{f,a,(j) G A(a.(,,o-,s) if aiid only if there exists an object eflEect proposition 
of the form 

a causes / if . . . Pm 

such that pi - . . Pm holds in a or a non deterministic effect proposition of the 
form 

a may affect/ if pi , . . . , 

in D such that pi, . . . ,Pm holds in a and / holds <I>o(a, cr)- 

6. ab{f,a,a) G ^(<i>o,<7,s) if and only if there exists an object effect proposition 
of the form 

a causes ->/ if pi . . . Pm 
such that pi . . . Pm or a non deterministic effect proposition of the form 

a may affect/ if pi , . . . , p^ 

in D such that pi, . . . ,Pm and / does not hold in $o(tt, cr)- 
Nothing else belongs to ^(^^^^.s)- 
Definition B.6 

Let D he a. domain description, $o a 0-interpretation, and cr a state- We will say 
that the pair ($o,cr) is a 0-specific model of the domain description if cr is an 
initial state of D and <l>o one of its 0-modcls. 

In the next two theorems we will prove that the logic program models correctly 
the execution of a single non-sensing action. 

Theorem B.7 
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Let -D be a consistent universal domain description with no knowledge laws, and a 
a state. If ($0)O') is a 0-specific model of D„, then ^(^^^^.s) satisfies every rule in 
n^^^ ^) ) for any situation constant s. 

Proof 

Assume that ($0)C) is a 0-specific model of D^- Then any fact holds{f,s) or 
holds{f,s) in Hj^^ is such that either holds{f,s) is in A($o,o-,s) or holds{f,s) 
is in ,^ ,5), which is obvious. Furthermore, for any literal of the form holds{f, s) 
(resp. holds{f, s)) in TlJ^-, obtained from the translation of a proposition of the 
form initially / (resp. initially -1/), wc will have by construction that holds{ f, s) £ 
^($o,o-,s) (I'ssp. holds{f, s) g j4((J,|^ o- Now, let us take a pair of rules of the form 
holds{f, res{a, s)) ^ holds{pi,s) . . . , holds{pm, s) 
ab{f, a, s) ^ holds{pi, s), . . . , holds(j>m, s), not holds{true, s) 
obtained from the translation of a proposition of the form 

a causes / ifpi, . . . ,Pm 

, and assume that holds{pi, s), . . . , holds{pm, s) £ ^($(,,(t.s)- Then by construction, 
Pi) • • • ,Pm holds in a and holds{true, s) ^ A($o,cr,s). Therefore ab{f, a, s) G ^(<i>o,o-,s) 
and / is in ^0(0, a). Consequently, holds(f,res{a,s)) holds in Ai^^^^^^^y 

The rules: 

holds{true,res{A, S)) ^ holds{true, S) 
holds{F, S) ^ holds{true, S) 
are trivially satisfied since there are no atoms of the form holds{true, s) in ^($(,^(^_s). 

Now we will make several considerations on ^(<i>o,<j,s) to evaluate the other rules 
(ground instances of the inertia rule and rules obtained from the translation of 
non-deterministic effect propositions): 

1. ab{f,a,s) holds in ^^^g). 

Any rule of the form holds{f,res{a,s)) <— holds{f,s), not ab{f,a,s) (in- 
stance of the inertia rule) is removed from H^^^ ^-^ to verify that A($„.ct.,s) is 
a belief set of 11 Moreover, by the definition of ^($(,,o-,s), there must be 
an effect proposition with one of the following forms 

a causes / if pi, . . . 

with pi, . . . , Pm true in a or 

a may affect/ ifpi,...,pm 

in with pi, . . . ,pm true in a and holds{f,res{a,s)) member of ^($o,cr,s) 
by case (3) above. So any pair of rules of the form 

ab{f, a, s) <— not holds{f, res{a, s)), 

holds{pi,s)), . . . holds{pn, s)), not holds{true, s) 
holds{f,res{a, s)) <— not holds{f ,res{a, s)), 

holds{pi, s), . . . holds{pm s) 
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coming from the translation of a non-deterministic effect proposition of the 
form 

a may affect/ ifpi,...,Pm 

will be trivially satisfied in ^($q^^_s). The other two rules obtained from the 
non-deterministic effect propositions are of the form 

ab{f, a, s) <— not holds{f, res{a, s)), 

holds{pi,s)), . . . , holds{pn, s), not holds{true, s) 
holds{f, res{a, s)) <— not holds{f, res{a, s)), 

holds{pi, s),. . . holds{pn, s) 

and they will also be removed from IlJ^ to veriiy that ^.s) is a belief 
set of n(£3_^ s), since holds{f,res{a,s)) e ^($o,cr,s)> and this concludes the 
proof for this case. 

2. ab{f,a,s) holds in ^^^g). 
Similar to previous case. 

3. Neither ab{f, a, s) nor ab{f, a, s) are in g). 

In this case we will have no effect propositions of the form: 

• a causes / if pi , . . . , p„ 

• a causes / ii pi, . . . ,pn 

• a may affect/ if pi,. . . ,Pn 

in withpi, . . . ,p„ true in <t. Therefore any rule r in IlJ^ with predicates 
involving not , a and /, will be such that the body of r does not hold in 
^{■f>o,<T,s)f unless, possibly for those rules of the form 

holds{f, res{a, s)) <— holds{f, s), not ab{f, a, s) 

holds{f, res{a, s)) ^ holds(f, s), not ab{f, a, s) 
instances of the inertia rule. So we will verify these by cases, 

• holds{f, s) holds in ^($|j,ct,s)) then holds{f, s) does not belong to ^($o,ct,s) 
and there is nothing to verify for the second rule. The first rule is trans- 
formed into 

holds{f, res{a, s)) ^ holds{f, s) 
and it is satisfied by g-.s) because / is in a and since there are no effect 
propositions of the above types, and / is true in ^o{a,s), by definition of 
^($o,cr,s), we have holds{f,res{a, s)) G Af^^^^^^s)- 

• holds{f,s) holds in v4.($jj^£r,s) 

The proof is similar to the previous case. 

Theorem B.8 

Let D be a consistent universal domain description with no knowledge laws, and 
cr be a state. If (f&o, cr) is a 0-spccific model of Dcr, then ^($(,,(7,s) is a belief set of 
n^^^ ^) ) for any situation constant s. 

By the above theorem we just need to prove that ,j) is minimal in the family 

of models of ^h^, Let i? be a proper subset of A($o,(t,s) and Q some predicate 
in ,^ \ B. Then Q could be a literal of one of the following five types: 
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i. - Q ~ holds{f, s), in this case there wih be a fact in IlJ^ not covered by _B, 

so it would not be a behef set of 11^^ . 

ii. - Q = holds{f,res{a,s)). f £ ^o{a,a) since Q is in therefore, 

— If there is a rule "a causes / if pi, . . . in with pi, . . . ,Pm holding 
in (7, there is a rule holds{f, res{a, s)) ^ holds{pi, s), . . . , holds{pm, s) 

in Il^jj with holds{pi, s) . . . , holds{pm, s) members of cr s) and by 
(i), 

holds{pi, s) . . . , holds{pm, s) hold in B, therefore this rule will not be sat- 
isfied in B. 

— If there is a rule a may affect/ if pi, . . . ,pm with pi, . . . ,Pm in cr, since 
holds{f ,res{a, s)) can not be in B (otherwise A($q_ct,s) would be incon- 
sistent) and holds{f, res{a, s)) is not in B, we will have that B does not 
satisfies the rule 

holds{f, res{a, s)) ^ not holds{f , resia, s)), holds{pi, s), . . . , holds{p„i, s). 

— If there are no effect propositions in D^, involving a and /, then, wc have 
that / is in a, because in this case / £ $0(0) f) if and only if / G ct, and 
the rule that will not be satisfied by B is the (ground instance of the) 
inertia rule holds(f, resia, s)) ^ holds{f, s), not a6(/, a, s). 

iii. - Q = holds{f , res{a, s)) 

The proof of this case is similar to the previous case. 

iv. - Q = ab{f, a, s) 

In this case we have that there is either an effect proposition of the form 

a causes / if pi, . . . ,p„ 

with pi , . . . , Pm true in a or 

a may affect/ if pi, . . . ,p„ 

in Drr with pi, . . . ,p,„ true in a, and holds{f, res(a, s)) G ^($(,,cr.s)- 
Hence, one of the following two rules are not satisfied in B 

ab{f, a, s) 4— holds{pi, s) . . . holds{prm s), not holds[true, s) 
ab{f, a, s) ^ not holds{f , res{a, s)), 

holds{pi, s), . . . , holds{pm, s), not holds(true, s). 

v. - Q = ab{f , a, s). 

Similar to previous case. 

We prove completeness in two steps. First, we show that if a belief set of 11^^ is 
defined as in Defintion IB . 51 then ($0i o") is a 0-specific model of D^. Then we show 
that every belief set of 11^^ must be of this form. 

Theorem B.9 

Note that by consistence of Dcr (we are assuming that (<E>Oi is a 0-specific model) there is no 
rule of the form "a causes ^/ if pi, . . . ,Pm" in Da with pi, . . .pm holding in a. 



44 



Jorge Lobo, Gisela Mendez and Stuart R. Taylor 



Let D he a, consistent universal domain description with no knowledge laws, $o a 
0-interpretation, and a a state. If ^($(,,cr,s) is a belief set of IlJ^ then (<1>0) cr) is 
a 0- specific model of Dg-- 

Let j4($p CT.s) be a belief set of 11^^ Clearly, by construction, a is an initial state 
of Dcr- Now let / be a fluent such that there is an effect proposition of the form 
"a causes / if pi, . . . in D^, and assume that pi,...,pm hold in a. Then, by 
construction, there is a rule of the form 

holds{f, res{a, s)) ^ holds{pi, s), . . . , holds{pm, s) 
in li^jj such that holds{pi, s), . . . , holds{pm,, s) € ^($o,ct,s)- 

Therefore holds{f,res{a,s)) e ^($o,o-,s) and hence / e $o(a, cr). The proof is 
analogous for effect propositions of the form a causes -i/ if pi, . . . ,Pm- If / is a 
fluent such that there are no effect propositions of the above two types we have two 
possible situations. 

(i) If there are no non-deterministic effect propositions of the form 

a may affect/ if pi , . . . , p„ 

with pi,. . . ,pm holding in a, we will have that there are no rules in Hj^^ such 
that ab{f, a, s) appears in the head of the rule and whose body holds in yl($u^(^_s). 
Therefore by the rules 

holds{f, res{a, s)) ^ holds{f, s), not ab{f, a, s) and 

holds{f, res{a, s)) ^ holds{f, s), not ab{f, a, s), 
(ground instances of the inertia rule), we will have that either holds{f, res{a, s)) is 
in or holds(f , res{a, s)) is in v4($„ ,^^5), since either f G a ov f ^ a, forcing 

either holds{f,s) or holds{f,s) to be in ^-.s)- Thus, holds{f,res{a, s)) (resp. 
holds{f,res{a, s))) is in >l($^_a.,s) if and only if holds{f,s) (resp. holds{f,s)) is in 
^(a>o,o-,s)- Therefore / € $o(a, c) if and only if / is in a. 

(ii) On the other hand, if there is a proposition of the form 

a may affect/ ifpi,...,Pm 

in Dcr with pi, . . . ,Pm holding in a, by construction, we will have in IlJ^ the 
following rules 

holds{f,res{a,s)) <— not holds{f,res{a,s)), 

holds{pi, s), . . . , holds(pm, s) 
holds{f ,res{a, s)) ^ not holds{f,res{a, s)), 

holds{pi,s), . . . , holds{pm, s) 
ab{f, res{a, s)) <— not holds{f, res{a, s)), not holds{true, s), 

holds{pi, s), . . . , holds{pm, s) 
ab{f, a„, res(a, s)) ^ not holds{f, res{a, s)), not holds{true, s), 

holds{p\, s), . . . , holds{pm, s) 

Thus, since A($g_o.,s) is a belief set of IlJ^^ and the holds{pi, s) are assumed to 
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belong to ^($o,cr,s) for every i, then either holds{f,res{a, s)) or holds{f ,res{a, s)) 
must be in ^($(,,ct,s)j but not both. Therefore it does not matter if / is or is not 
part of <i>o(ii f )• Hence ($o, o") is a 0-specific model of Dcr- 

Observe that for any domain description any state a and any initial situation 
constant s, a set of predicates A will be a belief set of 11^^ if and only if A 
is the union of belief sets of Il[D,s.a)^ for each possible action a. A — [_}{Aa : 
a is a possible action} with each Aa a belief set of ^(D,s.a)- This is because if ai 
and 02 are two different actions then none of the predicates in rules in ^[D,s,ai) 
appear in any predicate of any rule in ^{D,s.a',)i so the computation of the belief 
sets for one of the programs does not affect the computation for the other one. 

Theorem B.IO 

Given a consistent domain description _D, and a situation constant s. If A is a belief 
set for nj^ , then there exists a state ct, and a 0-spccific model $o of such 
that A = 

Proof 

By definition of H^^, A must be complete. That is, for any fluent / we have 
that either holds{f, s) is in A or holds{f, s) is in A. Thus, if we let a — {f : 
holds{f,s) G A} and $0 be such that for any possible action a, f G $o(a, cr) if 
and only if holds(f, res{a, s)) £ A, we will have by completeness that / ^ ct if and 
only if holds{f,s) is in A and / ^ $o(a, s) if and only if holds{f,res{a, s)) G A. 
Moreover, if some predicate ab{f, a, s) is in A then one of the following facts holds: 

• There is a rule in IlJ^ whose body is 

holds{pi, s), . . . , holds{pm, s), not holds{true, s) 

and whose head is a6(/, a, s) such that holds{pi, s) € A for any i — 1, . . . ,m, 
and holds(true, s) ^ A. Thus, there must be an effect proposition of the form 
"a causes / if pi, . . . ,Pm" in D with pi, . . . ,Pm true in a. 

• There is a rule in IlJ^ whose body is 

not holds{f, res(a, s)), holds{pi, s), . . . , holds{pm, s), not holds(true, s) 
whose head is a6(/, a, s) such that holds{f ,res{a, s)) and each holds{pi,s) 
are in A, for each i — 1,...,to, and holds{true, s) is not in A. Therefore, 
in this case there exists a non-deterministic effect proposition of the form 
"a may affect/ if pi, . . . in D with f,pi,.. .pm true in cr. 

If for some fluent /, a6(/, a, s) is in A, we will have by similar reasons that there 
exists a proposition of the form 

a causes -1/ if pi , . . . , pm or a may affect/ if pi , . . . , pm 

in D such that pi, . . . ,Pm hold in cr and / ^ 'I'olct, c). 

So we have proved that A — A($o,o-,s): and by Theorem lB.lOl {^Q,a) is a 0-specific 
model. 

We now extend the proof to handle sensing actions. Let Modo{D, S) denote the 
set {($o,cr) : 0-specific model of I?, a G S}, where E is the set of initial states 
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of D. Note that the set can be empty if there is no state in E that is an initial state 
of D. 

Definition B.ll 

Given a consistent situation S, and an interpretation $. (<f>, E) will be a 1-specific 
model of a consistent domain description D if: 

1. E is an initial situation of D. 

2. For any non-sensing action a, $(a,E) = {J<s>oeModo{D,T.) Uffes{*o(a, cr)}. 

3. For each sensing action a, if 

a causes to know /i if (pi 

a causes to know fs if (ps^ 

are all the knowledge laws in D where a occurs. Then, <i>(a, E) must be con- 
sistent and if Sa — 0, $(a, E) = E; otherwise $(a, E) = n;=i s such 
that each E/ is a situation (//, (^;)-compatible with E. (Recall that since D is 
simple, all the fi are different). 

Definition B.12 

Let E) be a 1-specific model of a domain description D. Denote by Assod($, E) 
the set of 0-specific models of D such that for any non-sensing action a, $(a, E) = 
U.es{*o(a,fT)}. 

Let a be a sensing action. Define: 

= {holds{f,res{a,s)) : a \= f with / a fluent literal } if cr G <f>(a, E). 
Otherwise, 

^(o- s) ~ {holds(true,res{a, s))} U {holds{f,res{a, s)) : / fluent literal }. 
Let A(<j,_s,s) = M(<[.o,a,s) ■ (*o,ct) e Assoz>($,E)}. 

As a straightforward consequence of this definition we have that for any fluent / 
and any action a, <I>(a, E) |= / iff A($ ^ s) |= holds(f,res{a,s)). 

For any set A of literals we will denote by a a the state (ja = {f holds{f, s) e A} 
We will denote by the set of value and effect propositions in D, and by D'"^" 
the set of knowledge laws in D. 

As a corollary of the theorems jB.8l IB.lOj we will have the soundness and com- 
pleteness of the logic program translation for the execution of a single action (sens- 
ing or not). The next corollary shows soundness and CoroUarv IB. 141 shows com- 
pleteness. 

Corollary B.13 

Let D be a consistent domain description. If (<i>, E) is a 1-spccific model of D then 
A($,s,s) is a world view of 
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Proof 

Let us suppose that ($, S) is a 1-spccific model of D. We will prove that 
is a world view of Hjjj In other words, we will show that A($ j;^) is the col- 
lection of belief sets of [IlJ^ ^^Jaj^j j; (see Section 1^1 for the definition of [IIJa 
and [IIJa)- Given an A £ Aj^ ^.s): let A = A'^^^ ^ and denote by 11 the pro- 
gram [ni^^^j \n[^„.,^^)]^^^^^^ which is equal to [nj^.^^^^]^^^^^^ union all the 
rules of the form holds{true,res{a, s)) <— holds(true, s) and holds{f,res{a, s)) ^ 
holds(true, res{a, s)) where / is a fluent literal and a is a sensing action. 

The set U = /ii(n[^„., ,.-|) split PJ^, ,,)]a(^,j:,=) ' and by theorem |R8|^(*o,<t,s) is 
a belief set of njp„.a ^y moreover &c/(nj^ = nj^„.a and any answer set of 

^u{[^lD,s)U(i„,„,s) \ n(£,«.=^s)' ^fo.fT.s)) is a belief set of A^^^^.^^)). 

Hence by Splitting Lemma we only need to prove that A is a belief set of g- ,j) U 
n. We first prove that all the rules in the program hold in A and then we show that 
A is minimal. 

Obviously any fact in U 11 is in A, thus we will prove that any rule R in 

n holds in A. Let, for a given sensing action a, 

a causes to know /i if p}, . . . 

a causes to know /s^ if p^", . . . ,p^° 

be all the knowledge laws in D, involving a, and $(a, S) ~ Cli^Li '^i where each 
is {fi,Pi, ■ ■ ■ ,pJjJ-compatible with E. The rules i? in 11 that mention a either in its 
body or in its head will be evaluated as follows: 

1. If E 1= /i or S ^ -if I, there are no rules in the program with the predicate 
holds{true, res{a, s)) in the head that are not ground instances of domain 
independent rules ( because any rule in flj^^^n will be removed, to get 
[n(i5=e„,,)]l(^^^, after checking 

-^Kholds{fi, res{a, s)), -^Kholds{fi, res{a, s))). 

2. If S ^ /; and ^Y'^fh then either 

(a) $(a, S) 1= p{, . . . ,Pni^ and $(a, E) |= In this case, R must be one of 
the following: 

holds{true, res{a, s)) <— holds{p{, s) 

holds{true, res{a, s)) ^ holds{p\^^ , s) 
holds(true, res{a, s)) ^ holds{fi, s) 

and each of these rules are verified in A, because; if holds{fi, s) is in A or 
for some i holds{p\,s) G A then aA \= p\ or aA H fi and in both cases 
aA ^ 'I'(a, E), and hence, holds{true, res{a, s)) G A, by definition of ^y 

(b) $(a, E) \= p\, . . . ,pI^^, and <f>(a, E) ^ /; This case is similar to (a) changing 
the last rule for 

holds{true,res{a, s)) <— holds{fi, s). 
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3. S ^ /i and S ^ ->/;, and there exists z = 1, . . . , ti;, such that $(a, S) ^ p'. 
In this case, there is only one rule that remains in the program; 
holds{true, res{a, s)) ^ holds{p{, s), . . . , holds{pl^^, s) 

Now, if for any i = l,...,rt;, holds{p\,s) £ A, then aA h= p\, for every 
i = 1, . . . , n;, and a a ^ ^(fl, S). Thus, holds{true, res(a, s)) € A. 

4. From the domain independent rules, R could also be of the form 

holds{true, res(a, s)) <— holds{true, s) 

But, by construction of A, holds{true, s) ^ A, and thus, R is satisfied by A. 

5. The last rules to consider, also coming from the domain independent rules, are 
all the rules of the form holds{f,res{a, s)) <— holds{true,res{a, s)), where / 
is a fluent literal. If holds{true, res{a, s)) belongs to A then, by construction, 
aA ^ <I>(a, S). Therefore, by construction too, holds{f,res{a,s)) also belongs 
to A, for every /, fluent literal. 

To prove the minimality of A, let C be a proper subset of A and h a predicate in 
A \ C.^ We will find a rule 7? in [IlJ^ s)]A^^ s ^^^^ ^ ^^'^^ ^■ 

If h is of the form ab{f,a,s), holds{f, s) or holds{f,res(a,s)), with a a non- 
sensing action, then R can be found in [IIp...^ s)]a^^ ^ ^y Theorem |B.8| . Thus, 
all these h must be in C. Therefore, it suffices to consider the case when h — 
holds{f,res(a,s)), with a a sensing action. If ft, = holds{f,res{a,s)), with / a 
fluent literal, and the rule holds{f,res{a, s)) ^ holds{true,res{a, s)) is satisfied 
in C, then holds{true,res{a, s)) ^ C, in which case, if holds{true,res{a, s)) is in 
^(^o cr s) ^ ^ then (7 ^(a, S), hence we will have that there exists an ^ = 1, . . . , Sa, 
such that a ^ S;,thcn since ^(a, S) is ... -compatible with E and the 

remark at the end of |B.12| we will have that one rule R of the following: 

holds{true, res{a, s)) ^ holds{fi, s) 
holds{true, res{a, s)) <— holds{fi, s) 
holds(true, res{a, s)) ^ holds{p{, s) 

holds{true, res{a, s)) ^ holds{p\-^^ , s) 

holds{true, res{a, s)) ^ holds{p\, s), . . . , holds{p[^^^ s) 

has to be such that both i) i? G [n|^s^„s s)]a(4, ^ > ^^"^ ^0 fluent literals ap- 
pearing on the body of R will be in a a- Hence the body of R will be true in 
A and therefore in C, thus we can conclude that R is not satisfied by C. If 
holds{true,resla, s)) is not in A, then a G $(a,I]) and holds{f ,res{a, s)) is in 
A, but this happens if and only if / G cr, which is true iff holds{f , s) G A, and the 
inertia rule will not be true in C . To complete the proof we need to show that any 
belief set of [B^ ,,)]a(^,2_,) is of the form ^(.j.^ ^r.s)' ^^"^ '^o™'^ (*o, cr) e Assod{^, S). 
Take now A, a belief set of [H^^ s)]a(4. e s)- By the splitting lemma, the set Aq = 
A \ {holds(f,res(a,s)) : a sensing action }, is a belief set of nj^„ ^ ^.y Then by 



Recall that A = A' „ 
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HB.10|I there exists {^o,(j) in Assod{^,'^) such that Aq = ^(*o,cr,s) = ^(<s>o,o-a,s) 
taking <i>(a, S) — [J„^^{^o{a, cr)}, it only remains to be shown that for any sensing 
action a, both of the following are satisfied: (i) If (Ta G <&(a, S) then f E aA 'i^ 
holds{f,res{a, s)) £ A, and (ii) aA ^ S) <^ holds{true,res{a, s)) S ^. 
For case (i), let cta S 'i'la, S). Then, for any / = 1, . . . , Sa, cta £ S;. The rules with 
heads of the form holds{f, res{a, s)) and / a fluent literal are: holds{f, res{a, s)) ^ 
holds(true,res{a, s)) and the one of the ground instances of the inertia rule. The 
body of the first rule is false in A because any rule with holds(true, res{a, s)) in its 
head must have its body false in A. Then, holds{f ,res(a, s)) G A <^ holds(f,s) G 
A ^ / e CTA- 

For (ii), holds{true, res{a, s)) G A if and only if there exists a rule R which body is 
true in A and its head holds{true, res{a, s)). Hence, R must be one of the following 
rules: 



holds{true, res{a, s)) ^ holds{fi, s) 
holds{true, res{a, s)) <— holds{fi, s) 
holds{true, res{a, s)) ^ holds{p{, s) 

holds{true, res{a, s)) ^ holds{p\-^^ , s) 

holds{true, res{a, s)) ^ holds{p{, s), . . . , holds{pl^^ , s) 

for some I = 1, . . . , Sq, and in any case, the rule R belongs to [H^^ s)]a(4, ^ a) and 
its body is true in A, if and only if cta ^ Sj. Hence, cta ^ S). 

Corollary B.14 

(Completeness) Let be a consistent domain description. If A is a world view of 
s) then there exists a 1-specific model ($, S) of D such that A — A(^^ y:.s)- 



Proof 

Let A be a world view of Let E = {cta : A G A}. If A G A, will be a 0- 

interpretation such that Af^^A „^ s) — ^ \ {holds{f, res{a, s)) : a is a sensing action 
and / is true or a fluent literal}, which can be found making use of Theorem jB.lOj . 
We define an interpretation $ such that Assod{^,^) = {($q ,crA) : A G A}, and 
$(a, E) = {a A ■ holds{true,res{a, s)) ^ A} for any sensing action a. Note that if 
($, S) is a 1-specific model of D then A = ^-j for any A G A. Thus, we will 

show that (<I>, E) is a 1-specific model of D and we will have that A = A($ x;.s)- 
It is clear that E is the initial situation of D. Then, if a is a non-sensing action, 
by definition, $(a, E) - ^a)} : ^ G A} - U{{*o(a,fT)} : ($o,^t) G 

Assooi^:^)}. 

If a is a sensing action and, a causes to know /; if p{, . . . , I = 1, • • . , Sa 
are exactly the knowledge laws where a appears, we need to show that for each I = 
1, . . . , Sa, there exists a E;, {fi,p[, . . . , pj, ^-compatible with E such that $(a, E) = 

1. If A ^ holds{fi,s) or A |= holds{fi, s) then let E; = E. 
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2. If A ^ holds{fi,s) and A ^ holds{fi,s) and A \= holds{p\,res(a, s)), for 
i = 1, . . . , rii, then: 

(a) if A 1= holds{fi, res{a, s)), then let T,i = {a G T, : a \= p{, . . . ,pl^^, /;}. 

(b) if A ^ holds{fi, res{a, s)), then let T,i = {a G : a \= p[, . . . ,pl^^, fi}. 

3. If A ^ holds{fi, s) and A ^ holds{fi, s) and A ^ holds{p\,res{a,s)), for 
some i = 1, . . . ,ni, we let J^i — {(T G Y, : 3k = 1, . . . ,ni, a ^ p^}. 

We need to show next that <I>(a, E) = n?=i ^i- F"^^ that, wc wiU prove that for 
any aA gY^., oa^ flj^i a ^'^'^ only if holds(true, res{a, s)) G A. 

First we will show that if aA ^ 0^=1 ,si then holds{true,res{a, s)) e ^. Let 
fc be an Z such that (ta ^ S;. Thus, since ct/i £ S then E ^ /fe and S ^ -i/fc and 
case (1) above docs not occur, and one of the following cases must hold: 

2. a. A 1= holds{pf ,res{a, s)), for every z = 1, . . . , rik, and A |= holds{fk, res{a, s)). 
Therefore, either a a ^ Pj for some j = l,...,nk or cta ^ fk- Hence, 
holds{pj,s) e ^ or holds{fk,s) € A and the following rules will be part 

holds{true, res{a, s)) ^ holds{pj, s) 
holds(true, res{a, s)) ^ holds{fk, s) 
Thus, holds{true,res{a,s)) e A. 
2.b. A \= holds{p'l ,res{a,s)), for i = l,...,nfe, and A \= holds{fk,res{a,s)), is 
similar to (2. a). 

3. A ^ holds{p'-,res{a,s)), for some i = l,...,nfe. Therefore, for every j = 
1, . . . , nfe, (TA \= Pj- Hence A \= holds{pj, s) and the following rule will be 

part of [TllD,s)]i^^,^,.,y 

holds{true, res{a, s)) ^ holds{p\, s), . . . , holds{p!^^, s) 
Thus, holds{true,res{a,s)) € A. 

For the other direction, assume holds{true,res{a,s)) G A. Then, it must be the 
case that there exists a rule in [Hj^, g^];^^^ ^ with holds{true,res{a, s)) in the 

head and its body true in A. Note that this rule cannot be holds{true, res{a, s)) ^ 
holds{true, s) by the construction of A. Thus, A ^ holds{f, s) and A ^ holds{f, s); 
otherwise there will be no rule in [11^^ s)]a(.„ ^ s) ^i^h holds{true,res{a, S)) in its 
head (these are ground instances of rules derived from knowledge laws). We will 
inspect the remaining rules with holds{true, res{a, s)) in the head and we will show 
that there exists such that a a ^ S^. 

1. If the rules are of the form: 
holds{true,res{a,s)) <— holds{pj,s) 

holds{true, res{a, s)) ^ holds{fk, s) 

then A \= holds{p^ ,res{a, s)), for i = 1, . . . , Uk, and A \= holds{fk,res{a, s)). 
Therefore, since holds{pj, s) or holds{fk, s) has to belong to A, aA ^ ^k- 

2. If the rules are of the form: 

holds{true, res{a, s)) ^ holds{pj, s) 
holds{true,res{a, s)) ^ holds{fk,s) 

then, similar to 1, A ^ holds{p'l,res{a,s)), for i = l,...,nk, and A \= 
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holds{fk, res{a, s)). Therefore, since holds{pj, s) or holds{fk, s) has to belong 
to A, OA ^ Sfc. 
3. If the rule is of the form: 

holds{true, res{a, s)) ^ holds{p\, s), . . . , holds{p'^^, s) 

then A ^ holds{pf ,res{a, s)), for some i = l,...,nk- Therefore, since for 
every j = 1, . . . , rife holds{pj, s) has to be in A, a a ^ ^k- 

The next step is to show soundness and completeness for sequences of actions. 
Sequences of actions are the most simple plans. We then extend the proof to plans 
of all classes. The general proof will be by induction on the complexity of the plans. 
Thus, we start by formally defining complexity and other definitions required for 
the inductions. 

Definition B.15 

We will define the complexity of a plan j3 {co'mp{(3)) by: if the empty plan is [], 
comp([]) = 0. For an action a comp{a) = 1. For complex plans, comp{ if (fi then a) 
and comp{ while (f do a) is comp{a) + 1 and comp{ if ip then ai else and 
comp{[ai, is comp{ai) + comp{a2) 

We will say that a plan a is an n-plan if it has complexity n, it will be an < n- 
plan if it has complexity less or equal than n. P„ will denote the set of n-plans, and 
P<„ the set of < n-plans. 

We define the complexity of a situation constant s inductively as if s = sq; or 
1 plus the complexity of s' if s = res{a, s'), for any action a. A situation s will be 
called an n- situation if its complexity is n. The complexity of a predicate of the 
form holds{f, s) with / a fluent literal, or holds{true, s), will be the complexity of 
s, the complexity of predicates of the form ab{f, a, s), with / a fluent literal and a 
an action will be equal to the complexity of s plus one, the complexity of predicates 
of the form find_situation{[3, si, s) will be the complexity of (3 plus the complexity 
of si, and the complexity of a predicate of the form holds -after jplan{F, (3) will be 
the complexity of the plan /?. We will say that a predicate /i is an < n-predicate, if 
h has complexity m and m < n. Given a plan a, [a^] will denote the plan a and 
[a"+^] will denote the plan [a\ [a"]]. Denote by 11^ the subprogram of IId restricted 
to those rules mHjj with < n-predicates. Note that in any k-predicate in 11^, the 
constant situation is a sequence of k actions. 

Given a domain description D denote by the sub-domain of D obtained when 
we remove from D any value proposition. 

Definition B.16 

For any n > 0, we will say that a pair S) where $ is an interpretation and S a 
situation, is an n+ \- specific model of D if and only if it is an n-spccific model of D 
and for any sequence of actions seg„ = ai, . . . , a„, ($, r$([seg„], S)) is a 1-specific 
model of (i.e. D minus the value propositions). S) will be a specific model 
of D if it is an n-specific model of D for any n > 1. 



Definition B.17 
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Given a sequence of actions seq = ai, . . . , a„ and a situation constant s, res{{seq)^ s) 
denotes the situation constant res(a,i, . . . ,res(ai,s)), seg© denotes the empty se- 
quence and res{{seqfif), s) will be equal to s. Let Actn be the set of all the sequences 
of n actions. For any set of literals A we take (J(A,(seq)) the state such that 
/ e (J(^A,(seq)) ^ holds{f,res{{seq), So)) £ A. 



Definition B.18 

Given a pair ($, E) of interpretation and situation, rt > and the situation constant 

(*,S,so) 



So, we will denote by A^y'i, ^ the following family of sets: 



if n - 1, Aj^ j.^^^^-! - A(<j.^5:,so) 

If n > 1, let for any set A of (< n + l)-predicates, An and Ai denote the sets 
of (< n)-predicates in A and (n + l)-predicates in A (resp.). Then, A"^^ 
is defined as a family of sets A of (< n-l- l)-predicates, such that the following 
is satisfied: 

2. l{holds{true, (seg„,so)) isin A„ then A i = [jseq„£Act„ ^(seg„) with A(5eg„) 
the set of all the predicates of the form holds{true,res{{seqn, a), sq)) or 
holds{f, res((seg„, a), Sq)) 

3. If holds{true, (seg„, sq)) is not in A„ then Ai = A„ U Use?„eAct„ ^(seg„) 



where A(,e9„) is ^(<E.o,^(^„,,,,„),re.((seg„).so)) ^^^^ ^OmC ($0,fT(A„,(.eg„))) 

AssoD'-(<&,r<5((seg„), E). 



m 



Lemma B.19 

Given n > 0, a consistent domain description D, a pair ($, E), n-specific model of 
D, the initial situation constant sq- We will have that for any fluent literal / and 
any sequence of actions seq — ai, . . . , a„, holds{f, res{{seq), sq) holds in A"^ ^ 
if and only if / G r$([se(7], E). 



Proof 

The proof is by induction on n and it is straightforward from the definition of 

(*,S,S) 

The next corollary proves by induction on the length of the sequence of actions 
that the logic program translation is sound and complete for the execution of a 
sequence of actions. 

Corollary B.20 

Given a consistent domain description D and n > 0. A is a world view of 11^ if 
and only if there exists a pair ($, E), n-specific model of D such that 

A — A" 



Proof 

• The base case (n = 0) follows from IB . l'3l and IB . 141 

• Suppose the result is valid for any m < n. 
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• (^) Let A be a world view of H^^^. As in Definition IB. 181 define for any 
A G A, An to be the subset of A restricted to those predicates in A involving just 
< n-predicates, so A„ = {An : A G A} will be a world view of 11^, and by inductive 
hypothesis there is a pair (<i>i, E), n-specific model of D such that A„ = A"^^ 

We first define an interpretation $ such that (<I>, E) is n + 1-specific model 
of D. Given an action a, let A" be the set {holds{f,res{{seqn),so)) G An : 
holds{true, res{{seqn) , sq)) ^ An A seg„ G Actn} and Ai be A" union 

[{holds{f,res{{seqn,a), So)) : seqn is any sequence of n actions} 
U{a6(/, a, res{{seqn), sq)) ■ seqn is any sequence of n actions} 
U{holds{true,res{{seqn,a), sq)) : seqn is any sequence of n actions}] A 

Note that A — An U Ai. By the splitting lemma, Ai is a belief set of A" U 

Useij„eAct„ r es((aeq„),ao)] A- 

Hence bv IB .141 there exists an interpretation $2 and a 0-interpretation $0 such 
that for any sequence of n actions seqn with holds{true, res{{seqn), sq)) ^ An, the 
following properties are satisfied: 

1. ($2, r$i ([se(7„], E)) is a 1-specific model of , 
2- ($o,cr(A„,(se9„))) is in Assoc-- ($2, r$i([se9„], E)). 
3. Ai = 

U{^(<[.o,<T(^ „,r-e.((seg„),so)) " ^^^n ^ ylct„ A holds{true, res{{seqn) , Sq)) ^ 

Defining $ such that for any sequence of actions seqn G Actn if the atomic 
formula holds{true,res{{seq„), sq)) is not in An, then r$([se(7„], E) is equal to 
r$j ([seg„], E), we will have that E) is an n-specific model of D. Moreover if 
we take $ such that for any action a and any sequence of actions seqn G Actn 
, <I>(a, r$([se(7„], E)) = <I>2(a, r$([se(7„], E)), we will have that for any sequence of 
actions seqn G Actn, r*([se(7„], E)) is a 1-specific model of Therefore, ($, E) 
is an n -|- 1-specific model of D. 

It is clear by construction that either the predicate holds{true,res{{seqn), sq)) 
is a member of An, and by the inertia rules, Ai is the set of predicates of the 
form holds{true, res{{seqn, a), Sq)) and holds{f, res{{seqn, a), sq)) with a an action, 
{seqn) a sequence of n actions and / a fluent literal, or holds{true, res{{seqn), sq)) ^ 
An and for any sequence of n actions seqn the following propositions hold: 

1. ($0,cr(A„,(seg„))) £ Assonr ($, ( [se9„] , E)) , 
A = A' 

1 (*o,o-(A„,(se,„)).'-es((seg„),so)) 

Therefore by definition of A"^^ we have proved that A G A if and only if it 
is in A?+i, 



(<;=) Reciprocally, let (<i>, E) be an {n + l)-specific model of D. Then, by IB. 131 
induction and by the splitting lemma, to prove that A"^^ is a world view of 

n^+\ it suffices to show that for any A, A G A"+^ so) '^^^^ if A = An LI B a 

where An is the set of predicates in A of < n-complexity and Ba is a belief set of 
the program 



54 



Jorge Loho, Gisela Mendez and Stuart R. Taylor 



n = A. u [n'i+i - ns]^... ^^^^ = a„ u [ (J nj,.,,,,,,,,„,,„„]^„.. ^^^^ 

In order to prove this, we will show that the beliefs sets of the program 11 are 
exactly the sets of the form An U Ai defined in IB. 181 

First note that the belief sets of [{Jseq,,eAct,^^lD'-,res{{seq„),so))'\A-+'^^^^^ are the 
unions of behef sets of [Hj^^ res((seg„) so))]a"+^ ^ where seg„ is varying over the 
set of sequences of n actions. This is so because these programs are independent of 
each other. 

Hence, we will calculate the belief sets of each program H}^^ ^„,fi=„n \ » -iJ a"+i 

where seg„ S Actn and we will prove that the set of these union is A"^^ so)' 

To show this, let seqn be a sequence of n actions. Then there are two possible 
cases: 

1. holds{true,res{{seq), So)) G A„, and A„ U [T^lD'-,res{iseq^),so))^A'^+l, ^ ^las 
only the belief set Ba = An U Ai with Ai the set of predicates of the form 
holds{true, res{{seq, a), so)) or holds{f, res{{seq, a), sq)) where a is any action 
and / is any fluent literal. 

2. holds{true, res{{seq), sq)) ^ An and by theorem |B.14| . any belief set of 

An U [^D-,res{(seq^),so))^A^+}.^^^^ 

is equal to A„ U ^'(<i>o,^(^,^^^,,^,,re.((.e?„),so)) '^o™*^ 0-interpretation such 
that ($o,o-(A„,seg„)) ^ Assod- ( ( [se9„ , fl] , S)) . 

Therefore the belief sets of An U [nj^r ^„c//,„„ , u1a"+i are precisely the 

[ly ,r cb{^{^scqn ) ,SQ ) ) ^ ^^^^^ 

elements on A^^i, s, and this implies that A!t^i, s is a world view of 11 n^^. 
Definition B.21 

Given a domain description D, an initial situation constant sq and a specific- model 
(<i>, S) of Z?, we will denote by A^^ ^ the following family of sets, A g A^^ ^ 
if and only if for any rt > 1 there exist An G A"^ and An+i G A"^^ with 

An An+i, and A = lJri>i We will denote by A^ ^ the family of sets A, 
such that A is the union of sets An and Aq where An is an element of A^^ 
and An is a behef set of An U [Q]j^ 

Lemma B.22 

Given a consistent domain description D and the initial situation constant sq, A 
is a world view of IId, if and only if there exists a specific model (<1>, E) of I? such 
that A = A;?^^^_^^). 



Proof 

Given a world view A of 11'^, and A G A, we will denote by An the subset of A 
restricted to those predicates in A of the form holds{f, s) or ab{f, a, s) where s is a 
situation constant and a is an action, then the set An = {An : A G A} is a world 
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view of H/), and by (|B.20|I there exists a specific model of Hd such that An is 
equal to Af, y. p since [Q]^ is equal to [QJ^.^ , applying the sphtting lemma 

to [ng]^ = [Ud]^ U [Q]^ we have the result. 
Theorem B.23 

Let Z? be a domain description, sq be an initial constant situation and ($, E) 
be a specific model of D. Then, given a sequence of actions seq — ai,...,afe, 
and the situation constant s — res{{seq), sq), we will have that, for any situa- 
tion constant si and any plan f3, there exists a sequence of actions seq^p ^^ such 
that r$([se<7, seg(^ s)], S) is equal to r$(/3, r$([seg], S) and for any A e ^^j, 
f ind situation (f3, s, si) belongs to v4 if and only if si = res{{seq, seqi^fj^s))^ so)- 

Proof 

The proof will be a double induction, using the loop nesting in the plan and the com- 
plexity of the plans. Thus, the while-complexity of a plan /3, denoted by wcomp{j3) , 
is if /3 is either the empty plan [] or an action a, max{wcomp{ai),wcopm{a2) If 
/3 = if (pthen aielse a2 or /3 = [ai|a2], 1 -I- wcomp{a) if f3 — while if do a. 
Taking wcom,p{j3) = we will do induction on comp{j3). 

• If /3 = [], the result is immediate, because 

r$ ( [seq] , E) ) = ( [] , r$ ( [seq] , e) ) , 

and for any A € A^ ^^^^ find_situation{[f3],s,si) is in A if and only if 
si = s. Therefore taking seq^p ^-^ = seqijj the claim follows. 

• Suppose the theorem is valid for < n-plans. 

• Let /? be an (n -I- l)-plan. Then we have the following possibilities 

T) (3 = [a[a] where a is an n-plan and a is an action. Then, by inductive hy- 
pothesis r$(Q;, r$([seg, a], E)) is equal to Tq,{[seq, a, seq(a,res{a.s))]i S), there- 
fore we will have that 

r$(/?,r*([seg],E)) = 
r<i,([o,a],r<i,([seg],E)) = 
r$(Q;, r$([seg, a], E)) = 
r$([seg(c<,res(a,s))], r*([seg, a], E)) = 
r$([a, seg(„,res(a,s))], r*([seg], E)) ^ 
r$([seg(0,^)],r<i>([seg],E)) ^ 
r$([seg, seg(^,s)],S). 

Moreover for any A in A^ ^ find_situation{p, s, si) is in A if and only if 
find_situation{a,res{a, s), si) is in A. 

Thus, if we take seqt^p^s) = {seq^a.res(a,s)),0')^ since by inductive hypoth- 
esis find-situation{[a],res{a,s),si) is in A if and only if si is equal to 
res{{{seq,a), seq(^a,res(a,s)))i Sq), we have that find_situation{[l3],s,Si) is in 
A if and only if si = res{{seq, (a, seqi^a,s))), so) which is equal to the situation 
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res{{seq, seq^p^s)), So), and 

r$([/3],r$([seg],E)) = 
r<i,([seg,seg(;3,s)],r$([seg],S)) = 
r$([seQ'(;3,s)],r$([seg],S)) 

II) /3 = [ if Lf then ai, where ai, a2 are ni and n2-plans respectively, with 
ni +n2 = n then, we have that for any A in ^ find_situation{f3, s, si) 
is in A if and only if either: 

i) holds{if, s) holds in ^ and find-situation{[a2], s, si) is in A, 
or 

ii) holds{(p, s) holds in A^ ^ and find_situation{[ai, 0:2], s, si) is in A. 
By inductive hypothesis r$(a2, r$([seg], E)) is equal to r$([seg, seg(Q,2,s)], S) 
and r$([ai, 0:2]) r$([seg], E)) is equal to r<i,([se(7, seq([a-^^a2],s)]j for the se- 
quences of actions seqi^a2,s) ^^id se(7([Qj^ 

Hence by |B.19| and inductive hypothesis, find-situation{f3,s,si) is in A if 
and only if either 

i) (p holds in r$([se(7], E), and si = res{{seq, seq^^^^ s^), sq). 
or 

ii) (fi holds in r$([seg],E), and si = res{{seq, seq(^[ai,a2],s)), so)- 

Thus, if we take seq^p g) = seq(a2,s) in case i), and in case ii) seqi^p g) equal 
to seg^Qj we will have that r$(/3, r$([se(7], E)) — r$([se(7, se(7(^ ,,)], E)) 
and find_situation{(3,s,si), belongs to A if and only if si is equal to the 
situation res{{seq, seq(j3 s)), Sq). 

III) P — [ii if then ai else a'l, 02], where ai, a'l and 02 are ni, n'j^ and 712- 
plans (resp.) with max(ni, n'l) + n2 = n. This case is similar to the previous 
one. 

IV) (3 = [ while (p do ai,a2], where ai and a2 are ni and n2-plans 
(resp.), with ni + ?i2 = n. Here we may suppose by inductive hypothesis 
that for any fc > the plans [ai] and [a5^',a2] verify the theorem, and we 
will denote by se(7(j, q,^) the sequence seq(^ai,s) and by seq(j^ a2) the sequence 

Seq([a2],res{{seq^^^k]^-^)-so)) ■ 

Using the fix-point operator Tn defined by Tn(/) = {p : 3 a rule p ^ 
51, . . . , g„ in H with each qi a fact in J}, for any positive logic program H, we 
know that if TnT^ is defined to be equal to Tn(0) and TnT''+^= Tn(TnT''), 
then TnT", which is the set ljj,>i TnT'', is a fix-point for Tn- Moreover A is 
a belief set for [H^^ so)]a'^ ^^"^ '^'^^^ 

A = Trn^ ,A r • 

(*,s,so) 

Therefore, h ~ f ind-situation(f3, s, si) is in A if and only if there exists A; > 
such that h is in Trn-- ia 1'^+^. 

(f.S.ao) 

Let fcn be the minimmn k such that h belongs to Trn^ 1*^+^. We 

have that /i G Trn^^ ia t^o+i jf ^nd only if there exists m such that 
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the following properties are satisfied: 

1) For any j < m holds{Lp, res{{seq, seq(^j ,^^-^) , sq) holds in ^ 

2) holds{if, s') holds in ^ 

3) find_situation{[a^{^],s,s') € A 

4) find_situation{[a2\,s',Si) G A 

If we fix m with properties (1), (2), (3) and (4), we have by inductive hypoth- 
esis and |B.19| that, h E A ii and only if (p holds in rg,{[seq, seq(^^^^-j], sq), 
s' = res{{seq(^rn,ai)),so) and si = res((seg(„^Q2)), sq). Hence taking seqi^/^^s) = 
seq(jn,a2)i '^ill have that r$(/3, r$([seg], E) is equal to Ti^{[seq, seg(^ g)], S) 
and h E A'li and only if si = res{{seq(ps)), sq). 

The inductive step on 'wcomp(P) follows the same reasoning as in the base case. 

Corollary B.24 

Given a consistent domain description Z?, the initial situation constant sq and a 
specific model of D, ($,!]), we will have that for any fluent / and any plan /3, 
holdMfter_plan{f, (3) holds in A^ ^ ^^-j if and only if / £ r$(/3, E). 

Proof 

Let seqi^fj^so) be the sequence of actions described in |ij.23j . such that r$(/3, E) = 
r4>([seq'(^ E) and find_situation{(3, sq, si) holds in A^ ^ if and only if si = 
res{{seq(^0 sg-j), sq). Then since holdMfter_plan{f, (3) holds in A^ ^ if and only 
if find_situation{(3,SQ,si) and holds[f,si) hold in A^j^^^^^, we have by |RT9] 
hold_after_plan{f, (3) holds in A^ if and only if / G r$([se<7(^.s(,)], E) = 

r*(/3,E). 

Hence by |B.22| we have the following: 
Corollary B.25 

Given a simple and consistent domain description D and a plan f3. D \= F after/3 
if and only if H^ |= hold-after jplan{F, [3). 

Theorem 7.3 Given a simple consistent domain description D and a plan [3. D \= 
F after/3 if and only if H^ ^ hold_after_plan{F, (3). 
Proof: Direct from Corollarv lB.251 



